last executing test programs: 14m54.853609522s ago: executing program 1 (id=869): socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7fffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x9, 0xc, 0x24, 0x20000001, 0xffffffffffffffff, 0x1, 0x5}, 0x4f4) mmap$auto(0x7617, 0x5, 0x100000000000002, 0x40eb3, r0, 0x300000000003) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x4b41, 0xffffffffffffffff) socket(0x25, 0x2, 0x73) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) r3 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000800) setuid$auto(0xe) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0b, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2d2500, 0x0) read$auto(r4, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x19, 0x79d, 0x6, 0x100000000000000, 0x7f, 0x20000f]}, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 14m53.776577532s ago: executing program 1 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r1, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70ad28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/trigger_fs_error\x00', 0xa801, 0x0) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) setresuid$auto(r7, r8, r7) write$auto(r6, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f@W\x9d\xf4 \xd3di\x84\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j;!\xa4+{\xe6\x02\xb8\x88\xea66$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^d$\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf8\xf2\xe3\xb7\x85\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xf5m\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\'\xf2\x8c\x1a\xd00Z\x06\xf2\xacL\xe0\xab\x1d\x1e\x94?', 0x81) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="adc42d2f6cd9c056180000006f4a821293a40b1e2168c143641e94708d7c4983f1e57a56684e09a522f9e01090f38e3714812e21dfa61d9c41b17501f784b25c6bbdeebec873f05f04f3345c2d9d4a8364a65dc68b5d", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf250400000004001800"], 0x18}}, 0x4044820) 14m52.961703754s ago: executing program 1 (id=874): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/tags_bitmap\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40054}, 0x24008010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x382c02, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x101882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20842, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003) close_range$auto(0x2, 0x8, 0x0) 14m52.276725558s ago: executing program 1 (id=877): truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x4) read$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x3ff, 0x1000000000000003, 0x12, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) init_module$auto(0x0, 0xfffff, 0x0) 14m51.780110305s ago: executing program 1 (id=882): mmap$auto(0x0, 0x4020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xe, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) (async) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x999, 0x0) (async) ustat$auto(0x801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async, rerun: 64) socket(0x2, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) io_uring_setup$auto(0x1, 0x0) (async) connect$auto(0x3, 0x0, 0x55) (async) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x10008000) sysfs$auto(0x2, 0x1f, 0x0) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 64) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) (async) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r1, 0x0, 0x17) 14m50.571116482s ago: executing program 1 (id=887): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x10, 0xfffffffe, 0x6, 0x7fff, 0xa, 0xffffffffffffffff, [0x0, 0x40, 0x20000], {0x6, 0x10001, 0x7, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000008}, {0xfff7fffd, 0x3407, 0x52, 0x5, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) r2 = socket(0xa, 0x3, 0x5) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000100), 0xa49d8b598935ceae, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x15, r3, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 14m35.431435353s ago: executing program 32 (id=887): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x10, 0xfffffffe, 0x6, 0x7fff, 0xa, 0xffffffffffffffff, [0x0, 0x40, 0x20000], {0x6, 0x10001, 0x7, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000008}, {0xfff7fffd, 0x3407, 0x52, 0x5, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) r2 = socket(0xa, 0x3, 0x5) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000100), 0xa49d8b598935ceae, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x15, r3, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000080), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) 11m1.945679627s ago: executing program 2 (id=1607): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x5, 0x5, 0xff, 0xac1, 0x5, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x800, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="260088433f80616d130fbe363391ae6c31d64a8b0e1161c769b5a2dbaed106951e3dad9a153b02c44ac9468e20af4f96b0992827928f8a30682438543a123566686bc0f208e0110faf91c9e9d638d95b0268fd9081713364cdf2f68a529cf027", @ANYBLOB, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x75) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x42140, 0x0) fchmod$auto(r1, 0x7d29) (async) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r3) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010329bd7000fedbdf250c000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x800, 0xa) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) (async) setuid$auto(0x0) write$auto(0x3, 0x0, 0x6) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad}}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11m0.911002894s ago: executing program 2 (id=1610): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2601, 0x0) getpgid$auto(0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x2fb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb5, r0, 0x8000) io_uring_register$auto(0x10, 0x7, 0xfffffffffffffffc, 0x1) madvise$auto(0x800003ff, 0xffffffff, 0x2) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x242c2400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup$auto(0x59, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2601, 0x0) (async) getpgid$auto(0xffffffffffffffff) (async) write$auto(0xffffffffffffffff, 0x0, 0x2fb) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb5, r0, 0x8000) (async) io_uring_register$auto(0x10, 0x7, 0xfffffffffffffffc, 0x1) (async) madvise$auto(0x800003ff, 0xffffffff, 0x2) (async) unshare$auto(0x20000080) (async) syz_clone3(&(0x7f0000000380)={0x242c2400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_uring_setup$auto(0x59, 0x0) (async) 10m57.547314022s ago: executing program 2 (id=1622): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x5f, 0x4000000000df, 0xeb1, 0x401, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) ioctl$auto(r1, 0x4b4a, 0x9) r2 = socket(0x11, 0x3, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) sendmsg$auto_NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x560, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_PROBE_RESP={0x54c, 0x91, "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"}]}, 0x560}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42}, 0x4) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r0) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') r6 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000400), r4) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000002c0)={0x553c81, 0x10, 0x13}, 0x18) write$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffffff, &(0x7f0000000100)="6e656c00813e8817517d381e8e2b7d03d9d63394815b3a0d31f4a2cc6f8c461f3cb94f4c7e2d8151e38fb861bfdac9494e7a5d3baae7500346b98e817bf2b03278ae2ec8a74f27ab72eff287ce9106d2882ffbb1287188cb55cf26e820fc4cbc79270b334a9139512b201aed734b4f2fd43aa7efbe138c473abd174394d8bb09ce50f264", 0x84) 10m52.902379592s ago: executing program 2 (id=1633): socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250500000008000500030000000c0001800800030008"], 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m51.738324999s ago: executing program 2 (id=1637): r0 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xa4) 10m45.697163239s ago: executing program 2 (id=1653): pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x8, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek$auto(r1, 0x7, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x800004) getsockopt$auto_SO_ERROR(0xffffffffffffffff, 0xccce, 0x4, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 10m30.518955441s ago: executing program 33 (id=1653): pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x8, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek$auto(r1, 0x7, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x800004) getsockopt$auto_SO_ERROR(0xffffffffffffffff, 0xccce, 0x4, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 8m15.001119103s ago: executing program 5 (id=2107): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd01, &(0x7f00000001c0)) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, r2, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, 0x0) poll$auto(0x0, 0x6, 0x3) 8m13.871476803s ago: executing program 5 (id=2110): r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(r0, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) semtimedop$auto(0x8000000b, 0x0, 0x3, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0xdd, 0xeb1, r1, 0x8000) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x1, 0x8, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) socket(0x18, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000009c0), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x82, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x80000000, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x1ffffd, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x1000, 0x1000000, 0x80, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000005, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000, 0x3]}, 0x1fe, 0xe) r4 = socket(0x2, 0x3, 0xa) connect$auto(r4, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 8m12.719933051s ago: executing program 5 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x40ffff, 0x4, 0x0, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x124, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x44, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7ff}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000001}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xfffffffd}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x9}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x6}]}, @NFSD_A_SERVER_PROTO_VERSION={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x73}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x53}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xf427}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x1}]}, @NFSD_A_SERVER_PROTO_VERSION={0x24, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7f}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xd1b7}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x80}]}, @NFSD_A_SERVER_PROTO_VERSION={0x48, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xc06}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9d3c}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x96}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x10}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x34, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0xe}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x7f}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x3}, @NFSD_A_VERSION_MAJOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x6}, @NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x124}}, 0x80) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2447e0286e43962caa237b58ed275aa124d4e754af3eb6dfb0bb5bc3f29e01ceaa4b0cddf69615bac4f9c952bf8666dc999d37d570a61f393357e01b225f7e84b674b23280703141bc3373f6a56b92ff52c0a3b1c4188e212d2c1186723b156e6360d0ad2c6f0c9678f008928bade3962e73dd55656784c0b8f095db7d37e3206cfc6a9d8b4a3bb1165f812926a5bb671f55fe7d481a3f1a7e97e1767d8aeb5b2c5422", @ANYRES16=r6, @ANYBLOB="01002db97000f61cb64a0c000000040003800c00018008000100", @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) 8m11.735420111s ago: executing program 5 (id=2114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) (async) r1 = socket(0x18, 0x800, 0x2) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_PEERPIDFD(r0, 0x3, 0x4d, &(0x7f0000000080)='/dev\x03\x00\x00\x00\x00\x00\x00\x00i\x032D0\x00', &(0x7f0000000240)=0xfffffff6) (async) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2502000000260109803c00d98008000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci3/force_suspend\x00', 0x101000, 0x0) (async) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x420009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x0, 0x8, 0x9) (async) r6 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r6, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) socket(0x2, 0x1, 0x106) (async) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x1) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x1, 0x6, 0xfffffffffffffffe]}, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xfffffffffffffffb, 0x2, 0x4, 0x400000000003, 0x4000000003, 0x10ba9788, 0xffffffffffffffff, 0x6, 0x80020000003ffffc, 0xfffffffffffffffe, 0x6d3c, 0x3, 0x2, 0x534aed11]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 8m10.784210967s ago: executing program 5 (id=2116): unshare$auto(0x40000080) unshare$auto(0xcda) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) sendfile$auto(0x1, r0, 0x0, 0xc01) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x10000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/software/type\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/157, 0x9d) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r4 = socket(0x10, 0x2, 0x4) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x1, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x7fff, 0x2, 0xe3, 0x111, 0x2, 0x8) 8m9.53471186s ago: executing program 5 (id=2119): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0, @raw=0x2}}) write$auto(0x3, 0x0, 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0x7fffffff) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7ffb) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/power/runtime_suspended_time\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xe5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x48, &(0x7f0000000040)='\x15\xbe\x9f)\xe3\x98\x8eB\xb5\x8b,\xfc\xa5!\xa8^./\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xfe\xdaN2\xfc\x89G\x85\xa7\x81\xe4\xe6zD\x96I\x18\xc8@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x92,\xe2=y\x9bR\xbcf\xa0c\x16~\x86_\r\x05\xe1G\x111\xe8\x8e\xcb\xed\x8f\xdf\xeeDX\xccm\xc6Mne=\x18\'\x97\x00\xc2\x01VQ\xb86\x03\xff\x88\x03\xd7\bX\xd4>\x91\x1eV-\x92\xa7\xb2\x1b(q\v\xd2\x1f\x9a\x14O\xf6\x18\x84\xe9Z\x80\xf3\x05\x12-\x8c\x8b;%Z\xdaX$K\xb6\xa6\xda\xa1B\xe0\x85\x15\xf0\xa7T\x01[\x8d\xc6\xcc\xb4\x16\xb3\x0eG\xa2\xa5\xa3\x1f\x0e\x89\x871O:c\xd9\x8d\x7f\x86\x9b\xfd@\x959\xbd\x18\xb9\xe7;\xb7\xa9P\x15\xdc\x9b\xce6\xb6\x16\x117\n\x95\xb2f\x10\x14e\xba2M\x8a^\x10\xee*\xbf\xac\x99\x9d\x12\x86\xcc\xb8\x8d\xc2\x06?\xc6\xc7\xad\x10\x97P:\xbf\x1c\xd7]\xfd\xf8\xeeb\xf2\xa0\xf1\xb1\x03\x10\xe3\xb6\xc3ASU\xa4*G;8\xfa\xd3\xaf\x99\xda4\xf7', 0x10000110) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9asg`sF\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r4 = io_uring_setup$auto(0x6d, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(r4, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x4cb7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x40000007fc, 0xf1) 7m58.955395871s ago: executing program 4 (id=2151): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0) readv$auto(r1, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd01, &(0x7f00000001c0)) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0xf, r3, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x300, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(0xffffffffffffffff, 0x4004550d, 0x0) poll$auto(0x0, 0x6, 0x3) 7m57.85099356s ago: executing program 4 (id=2154): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 7m57.593017752s ago: executing program 4 (id=2155): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/isolated\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/58, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0) sendfile$auto(r5, r4, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x200000c0) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x8000, 0x0) 7m57.339112372s ago: executing program 4 (id=2156): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x80802, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = socket(0x15, 0xa, 0x1) r2 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/8:0/wb_stats\x00', 0x20000, 0x0) read$auto_cgwb_debug_stats_fops_(r2, &(0x7f0000000300)=""/207, 0xcf) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000000c0)=@link_create={@map_fd=r1, @target_fd=r0, 0x0, 0x2, @tcx={@relative_fd=r0, 0x6}}, 0x40) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) 7m57.040860114s ago: executing program 4 (id=2157): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x784, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x56c, 0x2, 0x0, 0x1, [@generic="4dcf01fcae00618a0b460b6fe913c17e1e3f4be431309f70730c8fc99b4a2f230dee72d65640cc7f1cef902ba3d2157b59923803f7caa21616c9cc731154a6611508b0efb6c160387d1d2a98eab00a77acca651b27ff5fa4890ea79708072e2817fb166fc822a75c16534ee3db216e0e976441c99df6bf8aa847bf2c6e4537376e1ef80db846adca", @nested={0xbb, 0x9, 0x0, 0x1, [@generic="ad275d3f355bf2a98be5825c", @typed={0x1d, 0x4f, 0x0, 0x0, @str='/dev/dvb/adapter0/demux0\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @str=':&,\x00'}, @generic="3ab81c8aec90ffeaffa4a725116842144cd1787b6e4de9480ea333dacc38892ed68816c8480dff0bda203f8830c91e5e7c06bcc067fc6f72936958c82da71c35792bf3bb1ed69ee0335f1d79afdae3dcdab40f2f80ecbe6fc6a9fab2e3a397b4968eb5", @typed={0x1d, 0xb, 0x0, 0x0, @str='/dev/dvb/adapter0/demux0\x00'}]}, @typed={0x6, 0xb9, 0x0, 0x0, @str='^\x00'}, @nested={0x27e, 0x76, 0x0, 0x1, [@generic="1b975f88de44416b9fd5cf9b6d432be00be617ac73c352557bb11c48e6ee96030fe3c7aac3a3242b60839808dec53c57a7bfe76a7f34cfbf680b930f6b64014a853271a4cde62c02a62be0f909df5e650320da4b37ab9f06e7ac53dfcc6a9db7b6f0da7d899ee7fec1b2ffbe183d6876108f57874736780446d208ca38a5d25d072477bb690a0b31dff4934c5ee132efc43cdf22d5d3f5ed1f23ca336afd96f060a96451cfbaf43b08ad7855cd9b268d6ea18a399a22529611045ab0cadd9c37f8654feb89148087b6db747dc406753d664e0bb35629e1c70495", @nested={0x4, 0x26}, @generic="9a38517923182d845abb5c0382ca5f70e924626ed6425da001c56d2a57905be9ff625b93cc8fc74a04aa2007fd848c4fd1066f0be14fbaaaa73146d080b1c42cd1f1e8c803de262eb2b6dc251c355c2e574d3a1ff58e09cbb8138dcc953c7faf1ecdf447e9812be26fe37c1b7ab1921dce2b3f9d93ed05fc0b2708744ea7b575b0cefa3be2bdeb9b9111498b200228c85fa8bf49c08428a27fd58ebfb5557012fe19b6957c38f33bb17f480e4afd18de0652d281bad4dc7aa9be3b9211fbd3e2807d239429e4567510da82c0a061c71e90f9593d3e6324ae798ff218e6a85593b40e7413", @generic="c1e4f64ed688b827adc744b69110d7edb9d59bf5fc65cd15a1d0ce30cb9b894ffb8aa312c35050e196146457b0f62ad4edec572bce96ec22279e904198e8023519bfd8634d5eb7aed598d945386e819ef7cbf06990cda77e3f33759d23a27005da556fb44654fa75c9d6f177ebe050200898ee862cfa1c2993e2a045c5fec81b01725a1d4e26828de1a9278e3c04c49cc241f8c2c05de55167ed699983c973f9ec13b89accc6a4226691f9b5e9d2e5cccf623bd4ecaf4b63"]}, @nested={0xa6, 0x52, 0x0, 0x1, [@generic="75bd7ba50d841a96c6bd26ad554d2f3a4da444be005cb2df1fd7fc55f5f5e73217e27f3560498d31e09a46508d6320a89f23791d4f1196a6b474b40501d72990eaef289c7f471ae6639ddd389f5f58e1b9971c4113a397c4009c2a98f770c9f252ed386b04382d618ceaf85fdb72ccb88b588e0f6a31f2d78398757826f14d212dfd27814e5a1e341ffb9b68aa61", @nested={0x4, 0x37}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x400}, @typed={0x4, 0x36}]}, @generic="f208f7598d12b8450e1b075b681cc6e08475df816c8c4305ba5bcbcc0ea16d6200bf45ea34226d5c757ad3831ea01d59881b7e8ad0f3587ac1b8c8f9137e853f61f1220c7abbf99b877c138fe2e5fb17b7eaff0d25dc4899556e9bc2a82c0a2970c7e1cc6a7270fe9eefa0e51ce3245d69448ee78c934e2f9c2b4a1d7c2b5899198423d1678222dd98d21bcf57f48993c08d7e01fded415214c452da9e4f5c80adaa56fa979e6e14955d6ca17a46e8d38a81c4c5346db68f986112b702fad2e29c132e80a9e98869a86f56fc3212056a3ed8f577c1b236f66260b4ede0e091b680ea30f69234cfffa8ae239b65bc88f87bab6087"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x101}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x10d, 0x2, 0x0, 0x1, [@generic="2c8e560466883d29dc6ac3d992d6f3ce67c32968980b7f17ead85e7310d1a0dd15f353a6e5d065a108e801ab6d0b6c5b0d4c9f5c5b3e6085442f9055401965dd6c8cefce03d7d65a323885ea25cceacdac323357dc098267639ad1309bbf2a2fe8b04e1d8c03196e1117ecdf672c86c8d0877cc7eaaa621eea48b7e0dede564f023c7da2fbc66cab8a0f004ba4aab0e8f7fb3e569ecac6747d439ecf3bdebabc99a74569ceff1cc942acfd5288360345b251fac7389aff4e24cab03713dc93cec3e49f5d317e1048c351ca1880f10f62a3c712d34872976caebfc5fdb4f9c16dfe4dbf", @generic="44fb6313a33018b0cb8ac18d58095da44bafe55e4c73e7c23ce4", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x2597}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x784}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) unshare$auto(0x40000080) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40000, 0x0) listen$auto(r1, 0x78) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x40146f2c, 0x0) r8 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r8, 0x40146f2c, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, 0x0, 0x0) ioctl$auto(r5, 0x6f2d, r5) sysfs$auto(0x5, 0xfffffffffffffff7, 0x5) 7m55.275199003s ago: executing program 4 (id=2161): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10000000008, 0x7, 0x409f6, 0x40000000000a1, 0x0) r0 = socket(0x1d, 0x3, 0x1) r1 = getsockopt$auto(r0, 0x65, 0x4, 0x0, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getgid() recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_vga_arb_device_fops_vgaarb(r1, &(0x7f0000000040)="bbf1e926859b709077c5b495fa45d51b537cf28a1370cf0c618862dfaf30e42deb97af60aa10b0ffde9524a0536f585f13357581ca457ede23d9b6421bd6b3b99fab9ca678af5a8bb1a1d78c72bc01f7ac0192005125a1fffeb90fcc0ab40e0b3d1d30e37d81735c539d78f5f3da88e0e494609aacb4199256bcd7e386e32dff568078415ddae8b5e2981c860e8b02558ed5d31f6420e603a3757f520d29a6209384155043ab60411d5ec4777b1cb0c1391caf5199ef6d96af73841632ec4604354644e97b15c0d77e099db5b2619b", 0xcf) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 7m54.328136915s ago: executing program 34 (id=2119): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0, @raw=0x2}}) write$auto(0x3, 0x0, 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0x7fffffff) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7ffb) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/power/runtime_suspended_time\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xe5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x48, &(0x7f0000000040)='\x15\xbe\x9f)\xe3\x98\x8eB\xb5\x8b,\xfc\xa5!\xa8^./\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xfe\xdaN2\xfc\x89G\x85\xa7\x81\xe4\xe6zD\x96I\x18\xc8@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x92,\xe2=y\x9bR\xbcf\xa0c\x16~\x86_\r\x05\xe1G\x111\xe8\x8e\xcb\xed\x8f\xdf\xeeDX\xccm\xc6Mne=\x18\'\x97\x00\xc2\x01VQ\xb86\x03\xff\x88\x03\xd7\bX\xd4>\x91\x1eV-\x92\xa7\xb2\x1b(q\v\xd2\x1f\x9a\x14O\xf6\x18\x84\xe9Z\x80\xf3\x05\x12-\x8c\x8b;%Z\xdaX$K\xb6\xa6\xda\xa1B\xe0\x85\x15\xf0\xa7T\x01[\x8d\xc6\xcc\xb4\x16\xb3\x0eG\xa2\xa5\xa3\x1f\x0e\x89\x871O:c\xd9\x8d\x7f\x86\x9b\xfd@\x959\xbd\x18\xb9\xe7;\xb7\xa9P\x15\xdc\x9b\xce6\xb6\x16\x117\n\x95\xb2f\x10\x14e\xba2M\x8a^\x10\xee*\xbf\xac\x99\x9d\x12\x86\xcc\xb8\x8d\xc2\x06?\xc6\xc7\xad\x10\x97P:\xbf\x1c\xd7]\xfd\xf8\xeeb\xf2\xa0\xf1\xb1\x03\x10\xe3\xb6\xc3ASU\xa4*G;8\xfa\xd3\xaf\x99\xda4\xf7', 0x10000110) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9asg`sF\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r4 = io_uring_setup$auto(0x6d, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(r4, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x4cb7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x40000007fc, 0xf1) 7m39.502686674s ago: executing program 35 (id=2161): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10000000008, 0x7, 0x409f6, 0x40000000000a1, 0x0) r0 = socket(0x1d, 0x3, 0x1) r1 = getsockopt$auto(r0, 0x65, 0x4, 0x0, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getgid() recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_vga_arb_device_fops_vgaarb(r1, &(0x7f0000000040)="bbf1e926859b709077c5b495fa45d51b537cf28a1370cf0c618862dfaf30e42deb97af60aa10b0ffde9524a0536f585f13357581ca457ede23d9b6421bd6b3b99fab9ca678af5a8bb1a1d78c72bc01f7ac0192005125a1fffeb90fcc0ab40e0b3d1d30e37d81735c539d78f5f3da88e0e494609aacb4199256bcd7e386e32dff568078415ddae8b5e2981c860e8b02558ed5d31f6420e603a3757f520d29a6209384155043ab60411d5ec4777b1cb0c1391caf5199ef6d96af73841632ec4604354644e97b15c0d77e099db5b2619b", 0xcf) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 6m19.487493956s ago: executing program 7 (id=2377): mmap$auto(0x2000000000004, 0x3, 0x4000000000e3, 0x13, 0x401, 0x6) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x6, 0x7fffffff, 0x40000000000eb1, r0, 0x8000) connect$auto(0x3, 0x0, 0x40000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dmmidi2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/status\x00', 0x101600, 0x0) read$auto(r3, &(0x7f0000000040)='\x04\x00\x86\xd2\x0f\x84\xe7\x05}\x88\x04\xc2&\x14^\v\x802\x89Y\xf2;\xe8\xf4a\xab\x01\xf5\x1f\xd5\xf5\x89lg\x0f+S\xbf\xa7\xc3\xd0\x1e\x18\xc2\xe8\x87\xa9\x9a4I;\xf6wP\'go\xf2\xf13\x91I\x819nz65-\x84\x11\x7f^\xed^\xbc\x17\x17\x82r\xa4\xf6\x86m\x81YI\xa7\xe7\x97%\x9d\bs\xc92\x1b\t\xf9q\a*\xf1\r\xc1\x18\xa7\x05m\xb1\xda\apU\xb8)b\x7f\xe9rQ\xc5N~,,\xad\xf0\x011\x8b`\xb8\x06\x01$\'\xb4\x03g\xe6\xf8\x18liR-\x97\xadX\x7f\v\xa4\xb5\xfa\xe0k\xa1\xc3\x89\x01\xb1J\xdcy!\x99\xf65\x9e\xcd\xe2[\xd78\x0e\xde-!u\x9bh\a\xbbHC\x91\xde\xd2\x9a}S\xf0\x85\x7f\x86/\xd7||\xf4\xca\xc9A\xac\xfb\x1f\xcb\xed\xbaF\xe5\xb2\xdc/Z\x1b\xc9\xb8\xc9\x83O2F\x91\a\x8c\xcd\xe57\xaa\x12\x03\xe4=\x85\xb3\xa7L', 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x216, 0x402000b, 0x2000006, 0xeb1, 0x401, 0x10001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x24040840) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r4, 0x7d, &(0x7f0000000100)="6f48518673c52b419d9709dcdc22fff70b6ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5", 0x5) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6m18.114348509s ago: executing program 7 (id=2383): prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) (async) setresuid$auto(0x0, 0x0, 0xee00) (async) r2 = socket(0x2, 0x801, 0x6) fstat$auto(r2, &(0x7f00000000c0)={0x2000000000000000, 0xf, 0x3eb2, 0x8, 0x0, 0xee00, 0x0, 0xfffffffffffffffd, 0x1, 0x3, 0xfbfffffffffffffb, 0xe0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x6}) r4 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r4, 0xffffffffffffffff) setreuid$auto(r3, r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f00000005c0)={0x0, 0x9e, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) (async) r8 = open(0x0, 0x80400, 0xb5d1af1605322df4) open_by_handle_at$auto(r8, 0x0, 0x6) (async) r9 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) (async) getrlimit$auto(0x9, &(0x7f0000000280)={0x5, 0x4}) (async) r10 = epoll_create$auto(0x3e) epoll_ctl$auto(r10, 0x1, r9, 0x0) (async) semctl$auto(0x75cd, 0xf9, 0xba, 0x1) (async) msgctl$auto(0xe40, 0x7, &(0x7f0000002880)={{0x40, 0x0, 0x0, 0x0, 0xb, 0xc38c, 0x4}, &(0x7f0000002800)=0x7, &(0x7f0000002840)=0x5, 0x8000000000000000, 0xffffffffffffffff, 0x330, 0x6, 0x3, 0x4, 0x0, 0x2, @raw=0x401, @raw=0x4}) r11 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_IPVS_CMD_GET_DEST(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, 0x0, 0x100, 0x70bd29, 0x2, {}, [@IPVS_CMD_ATTR_DAEMON={0xa6, 0x3, 0x0, 0x1, [@generic="e3187676f562d8ef2167ee5ae9114568e80ca9e3c331336024c3394b1a0a71dd394bd4b39b7877fd8957dc48c98b488f5913877ee9af71cdf84d3e77682cb794a61ac070d4176ccd723ea8a780d852facf459ed6498c4849d66b94f43281", @generic="b00b2f0aee50dce6365dc7242c84b4442c2403c1d239fee37fc18a3df7718ee612de0e1cca551cb39e572479c2b8109521c68aacb362688b1e48896e", @nested={0x8, 0x6f, 0x0, 0x1, [@nested={0x4, 0xbe}]}]}, @IPVS_CMD_ATTR_DEST={0xd0, 0x2, 0x0, 0x1, [@nested={0xcb, 0x6b, 0x0, 0x1, [@generic="63bad70af09486e9c99cc964af08470de9f6b842a30c2b4b134c73be73e300dcae30de943848d8560f03d25db06066b7779b2551562f92243f0412c7e621ef8299f3490465ef9d194cf42a8cc8850177584e9174bb5f49c630a2205fb497d8c48a1e7228d5243a54dc275219b55dee86c8a70eb8956e24528625a8b12a90fe27a8cbb0488c7e87fc3a2266857abe297f94e5f76ba6b5984f5afa8b1a2bdc1b8604edede5ddbafe62c394614a33d1619dc384c3fb140d2955340515fed28594ee5b869a", @nested={0x4, 0xdf}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x194}, 0x1, 0x0, 0x0, 0x8845}, 0x0) 6m17.59868869s ago: executing program 7 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000004c0)='\xbe\xb0\x8e\x12\xbc\xcd-/dev/audio1\x00dJ\xe6Y!\xff\x88\xe7\x81a\x96\xe4#0\x83\x00\x00\x00\x00\x00\x00\x00\x02\x00c\n`\xbd\xb7\x01f\xa1\x0etd`\xd9I\xb0\nU\xbfCxK\xbe\xb7\x14\x8bv\xc7\x11\x8d\x18\x17\xa9\fUj\x80\x04\xa4.a\xb1\x11\x95\xe8d\xb0#\xef\xf6\xf5R\xfaMuK\xaf\n\x98\xe3\x02I\xe9\xf3\xed\xe9\'\xd8\x04=\xe0h3S\xa1c.\x94x\xf2}O\x8a\xc7\xd3\x9f\x03S\xc6\vCE>\xb9k\xc2\x9e\xed\xa2\b;\x1a\xa2Q\xfa\r\x8c\x19\"\x96\xaaKlM39\xf2\xd4\xdb\x9e]s\x99\xfbJ|\x9a\xa3\b7\xc7l\x82\x95\xea\xfbA\xdd\xecF', 0xffffffffffffffff) (async) write$auto(r1, &(0x7f00000004c0)='\xbe\xb0\x8e\x12\xbc\xcd-/dev/audio1\x00dJ\xe6Y!\xff\x88\xe7\x81a\x96\xe4#0\x83\x00\x00\x00\x00\x00\x00\x00\x02\x00c\n`\xbd\xb7\x01f\xa1\x0etd`\xd9I\xb0\nU\xbfCxK\xbe\xb7\x14\x8bv\xc7\x11\x8d\x18\x17\xa9\fUj\x80\x04\xa4.a\xb1\x11\x95\xe8d\xb0#\xef\xf6\xf5R\xfaMuK\xaf\n\x98\xe3\x02I\xe9\xf3\xed\xe9\'\xd8\x04=\xe0h3S\xa1c.\x94x\xf2}O\x8a\xc7\xd3\x9f\x03S\xc6\vCE>\xb9k\xc2\x9e\xed\xa2\b;\x1a\xa2Q\xfa\r\x8c\x19\"\x96\xaaKlM39\xf2\xd4\xdb\x9e]s\x99\xfbJ|\x9a\xa3\b7\xc7l\x82\x95\xea\xfbA\xdd\xecF', 0xffffffffffffffff) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0xc000) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) (async) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) (async) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) r5 = getpid() move_pages$auto(r5, 0xa1, &(0x7f0000000180)=&(0x7f0000000080)="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", &(0x7f00000001c0)=0xa12, &(0x7f0000000200)=0x1, 0x0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYRESDEC=r5, @ANYRES32=r2, @ANYRES16=0x0], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x8, 0x7fff) (async) pread64$auto(r6, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x1ff, 0xffe, 0x16, 0x3, 0x8000) (async) mmap$auto(0x0, 0x1ff, 0xffe, 0x16, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) (async) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) (async) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) 6m16.570926316s ago: executing program 7 (id=2389): socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250500000008000500030000000c0001800800030008"], 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m16.293599392s ago: executing program 7 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x20045800}, 0x20040000) ioctl$auto_FS_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) mmap$auto(0x10c, 0x40000a, 0xdf, 0x9b72, 0x2, 0x1) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x5, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0xa9, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/crash_notes\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/247, 0xf7) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x181002, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x100000001, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x8, 0x1}) 6m14.499431262s ago: executing program 7 (id=2396): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r2 = open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) read$auto(r2, 0x0, 0x401) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) 5m59.179256935s ago: executing program 36 (id=2396): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r2 = open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) read$auto(r2, 0x0, 0x401) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) 2m7.394762539s ago: executing program 0 (id=2968): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x50) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/revision\x00', 0x8a080, 0x0) mmap$auto(0xfffffffffffffffd, 0x729, 0x9, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdf, 0x18, 0x7, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x80000001, 0x8000, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0c, 0x3e, 0x1000, 0x62, 0x4000008000001f, 0x6, 0x6d3e, 0x3, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x200000000080003) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0xffffffffffffffff, 0xfffffffffffefffb, 0x17) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop2/integrity/write_generate\x00', 0x2b02, 0x0) sendfile$auto(r2, r2, 0x0, 0xb2d) unshare$auto(0x40000080) socket(0x11, 0x5, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) 2m3.898027154s ago: executing program 0 (id=2972): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1a1, 0x8, 0x4, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000}, 0x1fe, 0x80) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x2, 0x801, 0x106) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r1, 0x0, 0x13, 0x0, 0x8009) 2m3.714706215s ago: executing program 0 (id=2973): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0x5}, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x4a085}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001100)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3], 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x8d6) landlock_restrict_self$auto(r1, 0x7) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x100000004, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/022/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, &(0x7f0000000100)}) read$auto(r5, 0x0, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r7 = socket(0x23, 0x2, 0x0) r8 = socket(0x11, 0x2, 0xc3) bind$auto(r8, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x4) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r7, 0x89ef, 0xffffffffffffffff) r9 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r9, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) 2m1.684061654s ago: executing program 0 (id=2978): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x0, 0x0, 0xa3) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = socket(0x10, 0x2, 0x4) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x1, 0x34, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub7/status\x00', 0xe81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/11:0/uevent\x00', 0x22400, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x400caed0, r1) (async, rerun: 32) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) (rerun: 32) ioctl$auto(0x3, 0xf29a, r3) 1m59.504664311s ago: executing program 0 (id=2983): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r2, 0xe, 0x3) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2004c001) ioctl$auto_EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) r4 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x800c6f40, r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xf0, r3, 0x400, 0x3, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xff}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_PREV_BSSID={0xbf, 0x4f, "1a3bab16ac50faf41ee652f4f50aabd94aa345f6f7915549807529d17ede29bf9e994ce39ce12c696eaf0fcdea7dd6b2df17267f861de73381b02a8b46b06b203d2d28e7189d6510e6594ec1b2a212e0492a50f74b12e9417244f91b1b259bf3dfa790c2f06c5bf71904b23db93b1403a06678ce21a58ac2139d7ba3d24a25c9b6f6b601abbce4bd9a64549bc23aaa1c2c4ff578410b44aa00ee37d12a169c04f9c66e567c04f6ff37a783452b1b48cf6a214d5596d99fa580e54a"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2, 0x0) 1m58.326058394s ago: executing program 0 (id=2986): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async, rerun: 64) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/smaps\x00', 0x84, 0x0) close_range$auto(r1, r0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x29, 0xcf, 0x0, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x801, 0x84) select$auto(0x8, &(0x7f0000000180)={[0x5, 0xc, 0x0, 0x3c670c00, 0x200, 0x8, 0x3, 0x5, 0x5, 0x1, 0xdd1, 0x821, 0x362e, 0x8, 0xd0c]}, &(0x7f0000000200)={[0x7ff, 0x3, 0x3ff, 0x7fff, 0xff, 0x3, 0x1000, 0x2, 0x3, 0xc714, 0x6, 0x5, 0x400, 0x5, 0xfffffffffffff1e5]}, &(0x7f00000002c0)={[0x1004000000000, 0x2, 0x7f, 0x4, 0x9, 0x0, 0x40, 0x5, 0x9, 0x7f, 0x1, 0x800, 0x8, 0x81, 0x0, 0x1]}, &(0x7f0000000000)={0xfffffffffffffffc, 0x1}) close_range$auto(0x2, 0x8, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/available_tracers\x00', 0x28001, 0x0) (async) io_uring_setup$auto(0xa, 0x0) (async) r5 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 64) getsockopt$auto(r4, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) (rerun: 64) 1m43.107477001s ago: executing program 37 (id=2986): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async, rerun: 64) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/smaps\x00', 0x84, 0x0) close_range$auto(r1, r0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x29, 0xcf, 0x0, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x801, 0x84) select$auto(0x8, &(0x7f0000000180)={[0x5, 0xc, 0x0, 0x3c670c00, 0x200, 0x8, 0x3, 0x5, 0x5, 0x1, 0xdd1, 0x821, 0x362e, 0x8, 0xd0c]}, &(0x7f0000000200)={[0x7ff, 0x3, 0x3ff, 0x7fff, 0xff, 0x3, 0x1000, 0x2, 0x3, 0xc714, 0x6, 0x5, 0x400, 0x5, 0xfffffffffffff1e5]}, &(0x7f00000002c0)={[0x1004000000000, 0x2, 0x7f, 0x4, 0x9, 0x0, 0x40, 0x5, 0x9, 0x7f, 0x1, 0x800, 0x8, 0x81, 0x0, 0x1]}, &(0x7f0000000000)={0xfffffffffffffffc, 0x1}) close_range$auto(0x2, 0x8, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/available_tracers\x00', 0x28001, 0x0) (async) io_uring_setup$auto(0xa, 0x0) (async) r5 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 64) getsockopt$auto(r4, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) (rerun: 64) 57.442880433s ago: executing program 8 (id=3081): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r2, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r5, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r6, 0x3, 0x81, @netfilter={0x2, 0x5, 0xe4d3, 0xffffffff}}, 0x96) 49.750896773s ago: executing program 8 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio1\x00', 0x8) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x14, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa6", 0xe, 0x0, 0x0, 0x0) (async) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa6", 0xe, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000007, 0x100000000, 0x0, 0x1000, 0x4) sendmsg$auto_SMC_NETLINK_GET_SYS_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc1212006a10dd0fdc3e9a0a93e42cfcfc0a0000cf0ddf2328f75fc106c0ef9db9acf5b35856f83fd8d9fa907fe7f03b45021b5a64acc2216f68104030cff7e07fb7182185481daae4", @ANYRES16=r1, @ANYBLOB="020025bd7000fbdbdf25010000009fe70a441ff9bdd5f370cfbe8ac297455c7c3b7492b8a5d5d4f44313255b71d4b3ac7541586dd5e6f349c3ed16c4b4c95f0d310f13049e02261f461f02226377f5260e1e197a6571fca438a4eec7f51ece4d6229ce8545520469b40ef54222dcee7ee841eacb0fda74c2fabb26a18fda20660a8460aacda7b2b72e955d8a8eabe8383217b3ce6f97c2c91b4f11b85984d9120d400d4b8d960e2cc575a0"], 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x18) gettid() (async) gettid() capget$auto(&(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x1, 0xd, 0x8}) (async) capget$auto(&(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x1, 0xd, 0x8}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) 42.467055862s ago: executing program 8 (id=3103): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4000000000810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) setresuid$auto(0x0, 0x0, 0x0) (async) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x144a03, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x144a03, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0xd9, 0x40eb1, 0x401, 0x300000000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sched_setattr$auto(0x0, 0x0, 0x7b) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) (async) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) r2 = open(0x0, 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) (async) getdents$auto(r2, 0x0, 0x400018) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000240)={0x1, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0x7, 0x9, 0x100, 0x8, 0x1, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccde, 0x0, 0x0, 0x0, 0x0, 0x1], "12f58e90205440c446b40d72a07b13ff09d1394860f44ca4b82adba1a138b53875d0023a3848637d520a3d34ee739ad0c709f090f5fa0051a205af99da0dd2289a5cb34c6631a345f37835e624f81847b5294c1a6f11f802de012baaf327838ce21f1a664ac972eedb8d00494d00177d8b6cfb438fa4e8bd81b4f9aa6a1d7dc39b68a27031a4506730ead3432d64f11e444250114791dbda3d0573b621dfd6443da3df8eb81a917f8af21bb8823d9f59c5b48b367fac058e4ca642ae64bf50f61874e907b3a4967f8d4846e094e58dbd8740d835bac2cdfd3bf0d8ecc18a6c0303239527a3"}, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) 38.662887955s ago: executing program 8 (id=3111): openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x1a5e01, 0x0) socket(0x3, 0x801, 0x10000084) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0x18000, 0x0) ioctl$auto(r2, 0x3b8e, r1) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffebffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) r4 = getpid() sched_setattr$auto(r4, &(0x7f0000000100)={0x8, 0x3e6, 0x1, 0x2, 0x2d6, 0x5, 0x1ff, 0x4, 0x3}, 0x6) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, 0x0) write$auto(r0, 0x0, 0x0) 36.866391053s ago: executing program 8 (id=3119): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) r2 = wait4$auto(r1, 0x0, 0x80000001, 0x0) capset$auto(&(0x7f00000029c0)={0x1, r1}, 0x0) shmctl$auto_SHM_STAT_ANY(0x81, 0xf, 0x0) waitid$auto_P_ALL(0x0, 0x8, 0x0, 0x7, 0x0) unshare$auto(0x40000080) syncfs$auto(r0) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), r4) r6 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x525400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x7, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000000, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3b, 0x0, 0x0, 0x0, 0x2]}, 0x400, 0x81) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0x1, 0xb, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d"}, 0x3, 0x3, 0x4, @inferred, @integer={0x4, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73272186425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000001ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000002a00)=ANY=[@ANYBLOB="7c190000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="735a22cf0bf4c76e679b32ec752ca4ccc8fe5df7ffb574941708c40b8f85a09e6be30e6b3c32d517df90e67eb20a4aebfc917406151849f04bf73c45cba219712e855bbee30d51d42575a7e61b1f040112c7338230521d3b1a32e2e01d8f258a689e2a31d774679cca8610458c785a5cc7ec9b05e165bf58998be8ae36c080a9247e5900ec00e11dced02f3810c25155457b2058850e4b5766d099122497c63ea078c280e2e534a870c3dd17c767a459a34ec724ffc0beca64baebc4d2d16a6ef5440b4b110cec12d514879c60115faddce6412408bc027ded21d1000000001400038008008500ac14147f0800fd00", @ANYRES32=r3, @ANYBLOB="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"/809, @ANYRES32=r6, @ANYBLOB="0c002f00ac0e0000000000008c120280470102800e0039002f6465762f72616d3500000008002a00", @ANYRES32=r4, @ANYBLOB="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"], 0x197c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 30.086442796s ago: executing program 8 (id=3132): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020008, 0x10, 0x12, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x200, 0xd, 0x1, 0x2, 0x2, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x10000, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="9c7056bb6ab43b89039e4f35dd4bbe797dfef1d16e79c0f2fa4e56cac6ddd35f1c578707d949a51294f63fa4fff227d4b0de8ee683046351f8e1a832f0d523e4d2cd456298626a437440ff8ed2dec9d930dcea32289be745a7fda5683bf6cf25f3d01b30f77c8131dd719a2b76462cd4f5f83ccf5ecf2da7ff4f284b05906993e1d55407b9c63b23b9da65bfa72a906ebf613b7b5ca7b8bfde60a28663317a4fc1e6326af295dd3b68de1eebcbf4113fb7a6"], 0x1ac}, 0x1, 0x0, 0x0, 0x8090}, 0x44084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) 22.901173494s ago: executing program 3 (id=3145): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) ioctl$auto(r1, 0xab06, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5609, r3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x20, r5, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}]}, 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) 18.762983344s ago: executing program 3 (id=3150): r0 = syz_clone3(&(0x7f0000000180)={0x106040600, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x1a}, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/41, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r3 = prctl$auto_PR_SET_MM_START_STACK(0x401, 0x5, r2, 0x4, 0x9) ioctl$auto_PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000200)={0xce16, 0x9}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000240)={@inferred=r0, 0x4d, 0x5, 0x8, "3f04932dae676c510976c6a1199b60d8b69a0a0fa382ac842e7fe6436ea053603b6458cd52cb064c74770e63", @raw=0x7}) ioctl$auto_BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)="6845a13e81dc9aed6082b0a8d99540e722c305e8c011ec6f3b331cc4d069be62474b666277c245ccfee3650679c9688af0ac07df70cce4664dc5431df796929be78a7a31ca82e7ba98326cacd209eb6b374797a4e03b206c8fc1cd21a6425f58ccbf1bb0f2ded57eea0ebcb7") ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000500)={0x1, 0x1, 0xd, 0xf8, &(0x7f0000000300)="46221065e77bf1caa71816c4c6724c1f58fdb1c12e4a6858906711ab2c54d0214eca0187a851b24481a7f72b2640497899195df2c6b8eb6789e66fbc0d7dd68369a59656a2a8ff60c82e847be14a4e9b703aba0099d914a0501e97f6346fd04f80b905155ddb685508692954157c4ba003d813dfa8da787c9a4da2a8e11664259a748f1f3a89a57674720ee9ba817a0140094de0acf484f90ecbab10ae4db972aad9e8d41fa654f8988c083368675605cccf9d680ea3b8d1e9f22a85da597d575ea7f2eef5e39fcbee7ec51b59132352a1c98ddc3ae192d32cea1fd1298caff969eb4fd3605bcf", 0x9, 0x1, 0x2b4c25b, @stream_id=0x3, 0x9, 0x7, &(0x7f0000000400)="783dc833d5ecee34d46d93233671292bee1d634f7f4e2c2fccf05350fa0bd2255fe999913ca0ee6869ab1f7cef9ab0c4f095e42fe59eed0a228272fa9447963ea28df2588e7411b4b2c575cf4b26103bfe296fcb462e62d7eb697bd5f4dd81dd7d194c63b09570205b195bac3db72c4112640b66432295324135469ec0bd879fd080685d7a2f27ef93180e429f2140387569b376a21768e9e652497f1482c58fe5d2c566b51f51cf66f6d958ce178e47a759d4f06000bb335d514146abcc45f2c01f3f738aff8b2254c66e805f573b84de4dca19b27bdcc3cb2b370a75fffde77a943dd68f0c", [{0xffff, 0x7, 0xbfd}]}) r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) write$auto_ctl_device_fops_user(r4, &(0x7f00000005c0)="57464e18", 0x4) close_range$auto(r1, r1, 0x2) ioctl$auto__ctl_fops_dm_ioctl(r3, 0x7f, &(0x7f0000000600)="eed652c86f1027afaa1f6bd6f3ecaecd6c79bad6b1cc54137d06c477d4991411bcf88208b5489391f9fbd5d5dab7c617dae316403392b97a8230e91a3c043e45da6de52af8900466916e251be2548f6971c2ba5c368c846b0ecc5a93386478a8ef28b7ef256af805ab5939ae64e54821a000a4ee2f58ec650359210d4a19ee9666e00369bc9a25f0a14f20fcefb6aa80e44f11822905dd4b5c37366520ef8544c28c0dc2e855a164b0bcc9568dbae8fcb1f9505cb3d334f5dd03d57917b66984f6f6463f4d85ddc6ce54") fcntl$auto_F_GETOWNER_UIDS(r4, 0x11, 0x4) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000700)={@padding, 0x96}) r5 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/ns/cgroup\x00', 0x4, 0x0) r6 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r5, 0x8004b709, &(0x7f0000000780)=0x5) ioctl$auto_SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000007c0)="09633bc30614049587e621db3f4bad0ef34d2875a2e04a1782d59dab5ba02a216e16aa2ce7906cfb8af9c0b5dea137c865678ef80c4be1f205f84665bf81bee8477284391448d764a5c3077766987e6ccf3d8ea10a7c05535a06a6ea42d57a8f8e903f542780fbb74b7c1b107d997cacb770ce09f98af5841fca6f6f355dbac4516cd4f701289bcc147f2d661a510b454bbaaacc39a6e3eb93495b77c64b9b108c917dd425de77251542f56b3d177c90f7c8ca0bf5affa21711bacc7fe") shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000009c0)={{0x9, 0xffffffffffffffff, 0xee00, 0xa, 0x3, 0xfffffff8, 0x8a2}, 0x6, 0x4, 0xcff, 0x1, @inferred=r6, @raw=0x7, 0x8a87, 0x0, &(0x7f0000000880)="79b060a70aa6022c55cc0bc044e2313fd6ba13cdb96fa34cbf91a90dde0d877a04a2c2d450cb22ce92b838baa537e3da13c53af78b77878d48298c3b13818eb84971cc14dc58b696e9f895520713ed3c92b7afcd84d058112a75a78c46a8", &(0x7f0000000900)="a2d067350aa301eed83cf53a8711fb406d753af9aa25f71eb89db370d68d21c81054ae4ea591044ab7a9dce725b5399d87664ecd321ad5351c27ea31772ef13ed09b21160adc1feb304076fe3e986f7c2fe2d96c3378471a5d79fc4dc11c5d2c403bf0298156b37a3910275f7b30f48ce587b6434d77047b1f1f8f6d29fccc8d70196526bcba84ef4cc4c932144a6b13d7ad4ec16077165bfed9468087ddaecf91661f85f88eaaed81d07eb90b8e1841d3e4009bf7c689b37c62cc9d05610f18"}) setfsuid$auto(r7) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000a80), r3) sendmsg$auto_NFC_CMD_DEV_DOWN(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r9 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sg0\x00', 0x4100, 0x0) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/ram10\x00', 0x301040, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000c00)={0xffff, 0x4, 0x7, 0xf58, 0x3, "6207d34dca535fa934a719fbc34017d3844ba147a24e8bc6a2a434a00f6bb1fbc9acae8b8e800c17e859791fabc7aee23512edbb85c00c29f41687a2"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/mtdblock0\x00', 0x82, 0x0) write$auto(r4, &(0x7f0000000cc0)='nfc\x00', 0xfffffffffffffffc) ioctl$auto_SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000d00)="77850c49fe5a91eb5f6a3accc109ec847c50f5b2b90e40b2825dbe6f5159f3ce0dad37564d0d0280cee599ec2f4fbb14db8930735211c3644eadc3175221b02f7a154aeb6ae027ae3121849ebb440cccf843757b1979bd98b7790fda54b057756c98df0ac5b9f99f069f18c3eec4a1985398e97f37acef7e50776e97412f2a89c8ec04a0673935c2dec88a60df61fa325bb62a267135872e1215a5bc345df0802e80833d0c2cca6c82f0131a0a343ac3d394c6212adda59159f867aec75a6e3e96d1ffc8fcc683c0aaa8f6485f886a5d7c63d0f840ef") write$auto_proc_loginuid_operations_base(r3, &(0x7f0000000e00)="704366047860918335dd4260d3e5a4e710b66f050963bfb19e1465224bbd064e4da017148d5f377c374791eb3306b9de813823336de00b75005b2a9fb71231259bb05ca33ef72f08c26073cdbc4fdbb8f0019f6453f8bd68fde7bf89cc6a189b76e1b079611db430c966640cf5c1ff59cc8c62afd9e0ed0a05478ad2f33e94f128245395835701fd3fe507443bdc917c2f3b4215cd74a4267a691fdf53406fa5cf36a785ae1730d384c0e59d7423c9abc59c6fa5c1e631559ce5037fd8c13c5a480432c51e31cfb6c32441bac4af1deb40f70aca562cea3e61df3eef1b5a1244246a9e3183ea1490a39368b469a5ac7ad5a37e40af82d04151206cca617e7f29e65638adce1d736f0168582ced7ff74d09d0ec9aac925b54c44db1c7ab742c46369b7d11aa3e04ce1d4f102fcff94894cf59b7ff6e077ee244e529c6fd20c13e9f8e62184af583f05c0d9ca0a925691613a4dbfa176500cc0f3209d81af0e45817ceab87f3110aec4669f02f19173c9993fc01e6b510c78aa74e72ae0a5053ebb937c72e70e2cd7187553c3c8c017e477486e2c3e7dd4acf0aed1c5e9149df114b14d52f441c2fb801039992316403d4f47dfabfd8d0c7604e9a0bd007554b78dde7200d6005f3fe4ee05b7e98517fd412c2140c19cf8945235b034b807ea8bdf2df10cdb81acd8391f9c8be27c74991949bd93672b3149d588f97091ba2db6e599d2edf1f117d039d074a923c9706ad3cfcfcf5e22b0ef39e82eb96391a4a63d0f9e406a5e1cd1e285913d2f28919be9f2e032bd904ac4264ef4fd82b957d093f784f005ff771dc5fa8b52207ed2d67f5a011894bf9eba30427f3484a2ddcd9597aa9545aa8e836a95192dcbebed7f50e87d4b5eab2c3a801ab8c3ced1f668939aa118f45ec8dfed23939a5b4c32fd423dc6a340e7c57cecdb1f4f44fbd261af7d12921ba17e60d2f7ebad9ad6d01d012eb79282802842da0c18d66fd49ff79b5a5f75bdc8c0091c6b2a6019107ae18043f96f9ee4d10f845d9b24ebd2c43a8f9655798641bccc82b2aa03e2811fbd7f834f4dd425c4048ecb0d91cfe966d19c73b20874da386995e3d2d0c2de54ea10ac943efc651661ae8a086235478f24eb26fc11a26b1e2d117df3cb04557058a5bdac33a338f1f2efe66482e2d04cd3d293e5f8715ee954fd5cda3b87ed71053adbeb8ff832f38c2fccb7317a1861713be2d4ee0a7bf69ed0b5d53e1c8417ae5aa451555e6b5fcad835b193e50eb050d908b997ff3ee81e0f811da5b3536b436e3f1aa7f96c4cfd2e3fcff37c67502ce6385f5b529926cb4db6a529e1ab8d339bed3cb4086bae3f53f3956d4c991c6199fbe726d3933efca9690f1a67e3ae29375b78bac6ca317a8df3960b151e5f2674fcb6d07dcbcbf974d82153e4f3b74b82edc283f75afead7b648893287082246eccd6439fa7214424b86420a81016b6296c2faf8581503d4336a0e3561785d2b882bd7a3f5b950b5fa431f1f74d34d0410c77cdbeaaff7062d1a2bbc2fee14f76a6ba87c550113b028c7246ff6769561d80275d23a2a8cedde6dd6bf5b5a456af1db9ed8100033d6ca475eafaea734530fba22300cb5b2076ff7f38cfb12a44adf8f4cba36b4d42406972d0bc76aa9a53b94b772849f30e6cf47ea05f1b340f4ae33f1097608a02e7a981e0625f3ddf76f750f41ae153571dbcfb29ccbf6922db3672826e86ff08d47d1151493a187d5a073735c20fcdcf07623ccdec6e4c41c3e8646d199faa2e9e119df157480ba1544b9007c84348a8d49427665fc76566c8957fde3565cbc1a557021369f89d8353266f68c3c7f9fb503d9ed4054817a20078d1ed68558a6c987da6ba03c1090616b1f25c5f105b1958eac92dc4cb87c466a685fe0f6b6782231cd5953cd2ac60c2c5e49ebd89549ff6001e32206648f5d9cf98ac376c1c3ea2b0b7a03a4a9fb503334cb642a771a1b76516ab228a0f6e7c3d0d448e2ee86c9e7aba739e4019cff25a3ca7f4955e2d28b4ec55b1094a8d2e39b1bcc6119ee06b373ff69dc0106edb267327439afcb9dfaedb0c08d3c069b25bd55b600180241ce2fb17add46dc3d73c8bd0fdbe51c74e8600f66ff98ae186039f3674ba1dcd402507e02157a1aa70de806dd9568cc85e5e151a58a774f1d9b396f290ff0e965f79be0911dcfb0143f5598849d3a51fb53ab45ebc866a277f3a4d32fbf2b4a3645f4806b7a3614f0d7933a8a7a9d018603e88bbc852e77df2dd8260281b19dff18a4ebe118c070aa2392a8d58fe18d2e6abaffe15bf071b3da9098445dedd79586a30b642471c6262097f2e2d97996f7543941dc7c01d5837c0ad8c11e7a2c145f9670df8676a507ae3fabbff8d9f5b4e41268d628f8f9066bce1f1f815d060a9ab0bebcd1a5f680d5596e56f6ed06cd748a325bc3226bf7c9513f42756c8596e5589d5e68c290165648ed626bb21f7138c2bcac8c8291bbccbf83f4c3b00a220b166bd7d1a93de9ac18ac77077c87ac1ced566fb5556ec8dafff17de63597461e04e87699686fbe92aa7b1d3f4462c535aa37ac87b0fd637c687b81f38ec899cd69c0d88c4f3b43eb6601f32c9c1bc05912d346503f5352771e64d3841c86e39fe2fd003d3f44bc992d55aa360b3fe6428f09e7586e2cfa022076fe314bfbe39f8cf09f6a3425a31ad11dd5c3fda2db6e73e45fe69f91cdb43e6e773b7f431dd1c0da7dec0d6340a3a1cfcac7cf10bbc1f173bd9702bd0f700e1fa27570fc26813e653601ee052565b4b9f8b5ca5c660b7dd3c4206103927a601ce417bad732d9ee8ed604be739f2b95b66ab99088fce74f0bc6ff5eaa53e72b91d050f27c061de0fba0ae2982b65e963fcd49a6839671d1717b6c797c2185c8e40d90f5833b1f1c563371bb43212f0c732a2cb1d39134cec576b2a004957be8617b35418531f4e62515f363ed702c3a7757671003b1f9ddd0c0713a679c7ddece4d9508701e11d814e8c16ae6603a7dfcfa3b51a26cc5f18788788c5ddff50857649b20713782222027b708836c4f9aa4143983474f8ee477b8050dab1848ed00dd000e33e8cfefde5f96fa8f6960eec9e8143d0646065d7c60ab64ed9019caa3517b64cf295fadd38b7d08ade0a218e3ae83039f67e0811fc12672a2e0b6fef916e68c60e20a17e2f735e787242a6c43f55eaeb22c6c1acb0bd7da42efa90457d4e5e6a5e893582f913da466599293ea89a946a6611985b62498a730ed847db6c12a4fb11d462f8d432162f9527af31edbfa97c3f7c552771955ddb30d736f4fe997b247b8ead22d2d3942b65add694acd2e55b3bef3b193b297841fba30b02e3b0771330ec765b4a169ae2414b42956d5c91cb58d0b6748ca3d3033c0602cfae230d297c071ae6721f0e74af08a702696a9fee5a6e1b9cfa8d7b46c00d4ca1c98a2011c14b94fbd04074050977f4ae12c791cce8cfaa2352e9eea4d0688c5c14e059b21a629035db9a0f02086be6f75da5dbb4b11b868952bfaa902af01181614fa7fe63ef3d0208af54b15bcb1d4d3bc138968cf55ee77c896c7b43c6298e47f75a1cc84ec4698b7183b1be59079ce1ea4f5a266d90615c794fab3d667b2355ffaa66c28a07fbbb7129ecd96a23d766b8b86b6bc9b19f4ada525f474b397d73696d2c99de654287cd8c87cdfa229da09791faf2f08f5992c8ce4969d856e399bbfab5cd19eef5141db1a3a7d51707d78e18a07a4df39e1201ae6d0aadc9837e6cb4d57d5a9619bb985805163ccd35727940364cc8f37251ac1f57cc6d8ebec5cd82f2fd98c06cfc20bc425993a4c2183a8a5b216f1890f2e3e6fdccd764d987635ea3ae0640f8bf699844b878484bffc9fa708e697b08cd546fdcf168f16d410facef2cd34d8904c337d15514aa62c4f9741ce75236b892697a1635eaab2b2d3ca477137be344d0ec32530152a2b81f9bd7be8d2e169a6431b05cc35af34cb4a83731e0114ad9293cf42db55ee4b61b8639a0d4ca9c040e22ab57e84949b545cf8ec69c0d47e1029952c491fe0f68d35e448ff35b8b15f00561ab726e3f9fdbff01e0742883787d6d1f23d29306ff7e3e1660d75575513eae90c07bffb0731a7c892a74dd46c7d038214384b9dfb74327e8f441d27217bf197398ec4d21cbdeed9dcbb4e9fbc645e5d774f5a3022b91ab28ced238a20b867462a7f5549688728f4dbb47a7ba52a79dd638390f6cc226192eb784548add9c826cc44abb47e67efcf37677a95ffd17dbd90ed5a87b6ad7d0fdf75d387048167019f7dea1c663fcf51b45587c4e06f9167e738e3a98bdf2cef99d46cdaf363ebf8102cb9dbeb7a8694de2211d63f2346333c8c8aa4240e2805ce85d76aa9d88c3dd2f2dc6e05605b3849d8001dca4a362d3f712f58685868e560bbbfaf4c46a6f14968acb7c57603d7b0cdec7c5069783c72ff48a0b218a2b49285e1499dff1cd185c9a5db66cff2894d8eadf4130c2688b7a2aafd7172bd2d7e4f4366c91a22287788ebe275310a05472c2b72509e53b9141831eead25360e880bc44438e9f142f315d5c86abd78c60e5d8c13dc61948181a8d0c5c6e068b3fc8093b35dc6455fad0d60292eb3eeafeac022a7e3665f497830117f0ba5fbf33303f6b1ba1a93723a57c545731285ad3eb902da57c68c2c2639b8363de9e77503ca4611d30ead0043b5ae30410215162a7a397c66eafc704398b03e9be8192d9dc5b9c26214694403521ba1783509f7f79cb9b0faf60c0a52243c839a55f89d07bffb6ba6f0e1d7919e1be20b3c23af579879f4fc5a0acc225f93d838be337fc082ae552294857d08a7af7c6bfc9b15d393998edb31ce5eacdbb7f03c1f338c9699376d35f537dc073b374651cd6ba9973f24c177f2af4f729669e270ab1653047de5ddd251f46d713afc2aeb6c155515cb93fbcb0fbae3801c4645c04d9edfd384b4e127c64ba08940a3d7f66da8fb5b4a55003160495997f8ab5c9d60317df308e84322d4fe98d73d032d3cf97ed7af82a3b31618770ac29488e8fe8ec5119b62442292bf0db7ab7c8220bd66dec3297e46ec3b4deb1184d4ac7b53a295008f6fc2e6552f11c9b5ee4c2fa58bb85095185ab994e0d2fa325dd9d24ef644e86dca24bd3162f8ac883d40a3c269a6acf28e83dcda3757c9107447a7c1372bbd84c3736d57e8531bf9db3b7e52bf5212a1d259ed7869c8c109934cd48b94016a9baafe4367686ea1508949bd5098577d6597b702b76b22764d36949f9fbab2cb6456ee70081ee4f9b81f4e2e587383c620f0f935464a8e676dbadbae438d20a7daf71431fae8e03fad26f8ac15b2d7ec6d8079c7ee4e4f0243343d144ab39b274a9eb11e1b5389c1e283db208da86578a91f7a39e2758e12b1082bb053720707e373c6db9c075b6b20975cf2a57755d36f2775208426408f607b4248012619db44bd32a3b380ac991ee5feda2e41517fc1b117a54db5788afac66d57d4a17eec548cc915d327530c51f8a34de5d3a383a170a47c84be8e1ee540737d8daadfaa7639a057eb88389b7ebfa588a9d64e5637bd3fd957545997b3a919d6676becf0d75a94bc02e1aecc142534c509948cf806545bf9397472c1c58d0ce41249355e3c61025df39943b41569199fdbc26a0964de4aebcb12ea06594bf787ec8cf34349cf461ccaccc8960e1d3747aadea3f43b7486ef62c9468d1a651734cb483f6e86a5eeaebd252a563e7a7a8fe2b55c32666e5f2811cba2fc584b654ccca3fb6af68efc4c8bd6e3004dad33", 0x1000) ioctl$auto_HPET_INFO(r3, 0x80186803, &(0x7f0000001e00)={0xb, 0xff, 0xfff, 0x21}) ioctl$auto_FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001e40)="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") prctl$auto_PR_SET_MM(0x23, 0x83f5, 0xffffffffffffffff, 0x9, 0x40) mmap$auto(0x6, 0xf, 0x4, 0x13, r9, 0x2) 18.414915749s ago: executing program 3 (id=3152): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) writev$auto(0x3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x1f, 0x2, 0x5) ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x8) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x60423, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x16, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) shmdt$auto(0x0) unshare$auto(0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) mincore$auto(0x1000, 0x4000000, 0x0) listen$auto(0x3, 0x81) mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 14.214289542s ago: executing program 38 (id=3132): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020008, 0x10, 0x12, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x200, 0xd, 0x1, 0x2, 0x2, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x10000, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="9c7056bb6ab43b89039e4f35dd4bbe797dfef1d16e79c0f2fa4e56cac6ddd35f1c578707d949a51294f63fa4fff227d4b0de8ee683046351f8e1a832f0d523e4d2cd456298626a437440ff8ed2dec9d930dcea32289be745a7fda5683bf6cf25f3d01b30f77c8131dd719a2b76462cd4f5f83ccf5ecf2da7ff4f284b05906993e1d55407b9c63b23b9da65bfa72a906ebf613b7b5ca7b8bfde60a28663317a4fc1e6326af295dd3b68de1eebcbf4113fb7a6"], 0x1ac}, 0x1, 0x0, 0x0, 0x8090}, 0x44084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) 11.630869573s ago: executing program 6 (id=3156): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x5, 0x84) r1 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x44110}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r3 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r3, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0x4, 0x2}, 0x54) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r4, 0xd23, r4) setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x8010, r4, 0x7fff) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1020009, 0x20004000000000df, 0xeb1, r5, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000000c0)={0x0, 0x380}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) io_uring_setup$auto(0x89, 0x0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(r0, 0x0, 0xd77d, 0x5dd9bca2) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) 10.402869623s ago: executing program 9 (id=3157): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x8905, 0x38) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.821517152s ago: executing program 9 (id=3158): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) ioctl$auto(r1, 0xab06, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$auto(r2, 0x5609, r3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x20, r5, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}]}, 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) 5.590578645s ago: executing program 3 (id=3159): mmap$auto(0x20000, 0x40005, 0xdf, 0x1b, 0x7, 0x28000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, r0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) getsockname$auto(r2, &(0x7f0000000240)=@l2={0x1f, 0x6, @none, 0x9, 0x2}, &(0x7f0000000280)=0x2) mmap$auto(0x0, 0x20008, 0x4, 0x3b, 0xffffffffffffffff, 0x8000) socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x5, 0x7fff, 0x19fff, 0x800009487, 0x8, 0x200000000008, 0x7f, 0x100000000003, 0x1000000009, 0x9, 0x3, 0x6, 0x400005, 0x5, 0x2]}, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c", 0x1a4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) pread64$auto(r4, 0x0, 0x6, 0x1ff) unshare$auto(0x40000080) r5 = open(0x0, 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r5, 0x0) 5.484874752s ago: executing program 9 (id=3160): mmap$auto(0xa, 0x6, 0x120040000000, 0x100040011, 0x401, 0x300000000020) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6fffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00004, 0x9, 0x800040abe, r0, 0x7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010027bd7000fcdbdf25e1aacda555806f6c060000000c00038008000100e6f8", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r0, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000041) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r1, 0x0) getdents64$auto(0xffffffffffffffff, &(0x7f00000002c0)={0xda5, 0x2, 0x46f, 0x0, "34e280b8da4bc5cc50cc3b9794c2b1d67d98748f124d265fc26ca67e70e1d7c2832413420bb90683222328e157028ebcc64e568b5eb13bc1337a3e5e1ade80ef29113d79b67c2ad128fbdd4bd0e58d1e5898d1d08654872f702faa95371082fba48189150018b5008f9602642128d28005eafccefdcb5e1f208c8894c23c0218614e411eb9d7ff3f102d4e51019fddff2dbafa4f303c3ebe36dfa87b859e7139c3f02472e9b5c56482cdc3679d6ff9f1c1fe9324698a9a464d8f1f8f5ce52ab67d0caa17986664229609232ab85fc6da60a30f204548b0de327407dd44ea2405ea7dada6428122c012ae53fc391dda"}, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap$auto(0x0, 0x400008, 0x7fffffff, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r2, 0x80845663, r2) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) r3 = bpf$auto(0x9, &(0x7f00000000c0)=@raw_tracepoint={0x2, r1, 0x0, 0xe4}, 0x18) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_OFF(r3, 0x4, &(0x7f0000000040)='+\'\x00', &(0x7f0000000480)="a55d102475b1c7550900f887615ad0d815e218fa11df542762b96a88de7987d51dcfd9e4133f2d9fc2cf8918e55aee0d136d04752e558f6cebeedc591b257275407a8530081ab733198f7783e11d1c0fadf4722ac9e0a4cdbc110a1bf0912f3a115b71aa21a76066091c23631b77891852ccd6e6859236cb4c438cdf5662afe5fa09136ef101a55f223cd6dd887cee4501485d688c52c1f6af01c36cf1e85b1ccd63586f90c0c6d81db88eb3161cbbb18cd4314fd4507e3c6f3c2d92f447f308edc5d7d528b3ef2ad390a41af372da77265fbd80f7e76db87625d818f956f02c3266", 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, &(0x7f0000000400)=""/67, 0x43) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/profile\x00', 0x60802, 0x0) write$auto(0x3, 0x0, 0xffd8) 5.435927066s ago: executing program 6 (id=3161): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) write$auto(r0, &(0x7f0000000100)='\x01\x00\xa8a\xe0a\x1cJ4\x00\xaaN\xc8\xf9\x12\xeb\x00\xab`{U\x04\x88\xa8\x96\x82\x88\xa8\x11_\x89\x06\x06\xa7Y}`@\x1b\x00\x00\x00\x00\x00\x00\x00\x00\xd22z\x14z\xbf\xf94\x92mP\x87[\xa4p\x93\xd4\xe3\xe8Vhpy\xf6\xce\xbb\x8c\xb2\xc9>\xd9Y\x8d\xbe\x90\xbcu*\xc8\xdc\x0e]\x01\xd1\x9e\x0f\x05_\xfc\xb8\xeb\xd9\xb7\xa4\a\xae\xa5I\f7\x17\x91L}m\xea\r+\xecy\xe1\xe0D\x824\xfc[+\x0f\xe0\x11\xe8\x83\xc4\"\xcc&z\x8c@pC\xb2\xf6k\x14~iA?\x90Pnj\x82\xea\xf0\xfa\xe8\xe1\x81Q6\x11\xe4T\xd5\xf0\xb1\xc65tr\x8b\x83^\xa17uX\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) (async) setsockopt$auto(r0, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) (async) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002cbd7000dddb06271200000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x59, 0x0) write$auto(0x3, 0x0, 0xfdef) 2.91226937s ago: executing program 6 (id=3164): openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x10082, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) prctl$auto_PR_SCHED_CORE_CREATE(0x4a95f9a7, 0x1, 0xffffffffffffffff, 0x2, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x600000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x20000, 0x0) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r2, 0x0, &(0x7f0000000000)='/dev/ttyS3\x00', &(0x7f0000000080), 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyd5\x00', 0x40001, 0x0) mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.508404081s ago: executing program 3 (id=3165): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_secret$auto(0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/self/stack\x00', 0x80200, 0x0) lseek$auto(r2, 0x5, 0x0) mlockall$auto(0x7) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7}) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci5/rfkill30/state\x00', 0x40000, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0x40000000000eb1, 0x401, 0xbf8e) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0xfffffffd, 0x0, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r3, &(0x7f0000000640)={0x8, 0x4000000000008}, &(0x7f0000000680)={0x5, 0x100009, 0x384, 0x400, 0x1}, 0x0) semtimedop$auto(0x9, &(0x7f0000000000)={0x7, 0x6, 0x37db}, 0x81, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x101000, 0x0) ioctl$auto_MEMGETOOBSEL(r4, 0x80c84d0a, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xfff, 0x8, 0x0) r5 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r5, 0x0, 0x24008000) getsockopt$auto(r5, 0x6, 0x2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x793, 0x2020007, 0x40000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) 2.417914737s ago: executing program 9 (id=3166): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x10052d, 0xffb, 0x17, r0, 0x7) io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0xfffffff7, "d01862fe819e604d4e68badb85f86d195c2182760db15e9e566832bae4a502d1", @inferred=r1}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) sched_getparam$auto(r2, &(0x7f0000000300)={0x7}) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r2, 0x4, 0x3) semtimedop$auto(0x2, 0x0, 0xa2, 0x0) mmap$auto(0x0, 0x400, 0x0, 0x44eb1, 0x401, 0x300000000002) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r3, 0x80045519, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233de", 0x148) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003b40)={'xfrm0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff06, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x14}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x5c, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x40000800}, 0x7, 0x4008) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 1.917445575s ago: executing program 6 (id=3167): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) writev$auto(0x3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x1f, 0x2, 0x5) ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x8) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x60423, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, 0x0, 0x1, 0x0) sysfs$auto(0x2, 0x16, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) shmdt$auto(0x0) unshare$auto(0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) mincore$auto(0x1000, 0x4000000, 0x0) listen$auto(0x3, 0x81) mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 1.91699449s ago: executing program 3 (id=3168): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x890) (async) timer_create$auto(0x9, 0x0, 0x0) (async, rerun: 64) read$auto(0x3, 0x0, 0x8080) (async, rerun: 64) socket(0xa, 0x1, 0x100) (async) write$auto(0x3, 0x0, 0xffd7) (async) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11", 0x31) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x802, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x106) (async, rerun: 64) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.904970586s ago: executing program 9 (id=3169): ioctl$auto_FIONCLEX(0xffffffffffffffff, 0x5450, 0x59) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x2000200, 0x10000, 0x0, 0x4) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) shmctl$auto_SHM_STAT_ANY(0x2cd, 0xf, &(0x7f0000000000)={{0x6, 0x0, 0xffffffffffffffff, 0x3, 0xf, 0x3, 0x7}, 0x7, 0x620, 0x8, 0xbeb, @inferred, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)="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", &(0x7f0000001380)="a7d6c20b3fcdb585540b612a7e0fa70c125e499b9f8e6bd0eee2fa28352dffff14a8f8d8bb3549c5b80c4cba883f0280a8a0fd8e65e28ca136b1a2dfe354e62b06954ba9937a11304134e0e65713bbc076f79df043b5d5468bf542041b128a3da8807a7e8608e7a110a9addc73cbee653fdd7af81b11276ef0637889269995ec03f6162de1f45aef72a583a0adb6109afa89dff73f1042a33646d004d76276b9cb51c065b673e2e0bfcd"}) ioprio_set$auto(0x7f, r1, 0x161) select$auto(0x8001, &(0x7f0000001440)={[0x0, 0x2, 0x1, 0xec10, 0x1, 0x5, 0x0, 0xfffffffffffffff7, 0x2, 0x5, 0x8, 0x4, 0x6, 0x7, 0x9, 0xf2]}, &(0x7f00000014c0)={[0x7, 0x1, 0x7fffffff, 0x4, 0xdaf0, 0x2, 0x4, 0x8, 0x5c, 0xb500000000000000, 0x2, 0x9, 0x5, 0x7, 0xb, 0xffffffffffffff4a]}, &(0x7f0000001540)={[0x4000000, 0x6, 0x4, 0x80, 0x8, 0x7, 0xffffffffffffffff, 0x0, 0x8, 0x7, 0x0, 0x3, 0x1, 0x4, 0x7, 0x3ff]}, &(0x7f00000000c0)={0x100000000, 0xb}) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 0s ago: executing program 9 (id=3170): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xf5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setuid$auto(0xe) r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) msgctl$auto_IPC_INFO(0x10, 0x3, &(0x7f0000000080)={{0x5, 0xee00, 0xffffffffffffffff, 0x47, 0x2, 0x78c5fe59, 0x9}, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2, 0xe, 0x800, 0x7ff, 0x6, 0x9, 0x9, 0x5, 0x6, @raw=0x8, @inferred=0xffffffffffffffff}) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000001400)={{0xca01, 0xee01, 0xffffffffffffffff, 0x3, 0x4, 0x8, 0x405}, 0x1000, 0x6, 0xb1, 0x9, @inferred, @inferred=0xffffffffffffffff, 0x728c, 0x0, &(0x7f0000000100)="54c361a4963f46ec762cbd930936d43cc0", 0x0}) setresuid$auto(0x0, r6, r7) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000200)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x71, 0x9, 0xffff}, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x2, 0x2, 0x2, 0x27c3, 0xffffffff, 0x0, 0x6, 0xa77d, 0x6, @raw=0x1000, @inferred=r2}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0xfffffffb, 0xee00, 0x343, 0x5}) keyctl$auto(0x0, 0x0, r8, r9, 0x7411) r10 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x4b72, r10) kernel console output (not intermixed with test programs): 0000000000000 R09: 0000000000000000 [ 857.000536][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.000551][T18053] R13: 00007fc23d3e6038 R14: 00007fc23d3e5fa0 R15: 00007ffca09c0758 [ 857.000583][T18053] [ 858.169093][T14241] Bluetooth: hci2: command 0x0c1a tx timeout [ 858.177352][T11318] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 858.518543][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2349'. [ 859.810725][T18105] bridge0: port 3(bond0) entered blocking state [ 859.853664][T18105] bridge0: port 3(bond0) entered disabled state [ 859.910263][T18105] bond0: entered allmulticast mode [ 859.958684][T18105] bond_slave_0: entered allmulticast mode [ 860.003995][T18105] bond_slave_1: entered allmulticast mode [ 860.040304][T18105] bond0: entered promiscuous mode [ 860.172479][T18105] bond_slave_0: entered promiscuous mode [ 860.228651][T18105] bond_slave_1: entered promiscuous mode [ 860.284901][T18105] bridge0: port 3(bond0) entered blocking state [ 860.291340][T18105] bridge0: port 3(bond0) entered forwarding state [ 860.607587][T11318] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 860.614612][T14241] Bluetooth: hci2: command 0x0c1a tx timeout [ 863.259343][ T1136] netdevsim netdevsim25 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.041369][T18157] Unable to find swap-space signature [ 864.877904][T18155] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2365'. [ 865.168031][T14241] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 871.805791][T18236] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 871.890434][T18240] syz.0.2382 (18240): /proc/18235/oom_adj is deprecated, please use /proc/18235/oom_score_adj instead. [ 871.957163][T18255] NFSD: Failed to start, no listeners configured. [ 874.492212][T18302] netlink: 'syz.0.2394': attribute type 10 has an invalid length. [ 874.567501][T18302] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2394'. [ 874.669268][T18306] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2395'. [ 876.444933][T18329] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2398'. [ 876.583044][T18333] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2398'. [ 876.665907][T18333] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2398'. [ 876.869454][T18333] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2398'. [ 876.953182][T18333] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2398'. [ 879.664828][T18346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.688096][T18346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 879.708909][T18346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 879.727176][T18346] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 879.761752][T18346] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 879.796465][T18346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 879.836267][T18346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 879.863679][T18346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 880.183661][T18356] netlink: 'syz.6.2406': attribute type 10 has an invalid length. [ 880.218104][T18356] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2406'. [ 880.418847][T18362] random: crng reseeded on system resumption [ 880.617608][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.623919][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.007373][T14241] Bluetooth: hci3: command 0x0406 tx timeout [ 881.739616][T16798] Bluetooth: hci4: command 0x0c1a tx timeout [ 881.745713][T14241] Bluetooth: hci5: command 0x0c1a tx timeout [ 881.818471][T14241] Bluetooth: hci0: command 0x0c1a tx timeout [ 883.807631][T14241] Bluetooth: hci5: command 0x0c1a tx timeout [ 883.887683][T14241] Bluetooth: hci0: command 0x0c1a tx timeout [ 885.887563][T14241] Bluetooth: hci5: command 0x0c1a tx timeout [ 885.967733][T14241] Bluetooth: hci0: command 0x0c1a tx timeout [ 886.126820][T18406] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.1), cmd(11) [ 886.542514][T18421] netlink: 'syz.3.2420': attribute type 10 has an invalid length. [ 886.592136][T18421] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2420'. [ 887.583693][T18437] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 888.017825][T16798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.028225][T16798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.035888][T16798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.044226][T16798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.054255][T16798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.560773][T18444] chnl_net:caif_netlink_parms(): no params data found [ 888.935626][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.997751][T18444] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.040270][T18444] bridge_slave_0: entered allmulticast mode [ 889.098178][T18444] bridge_slave_0: entered promiscuous mode [ 889.148874][T18444] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.211440][T18444] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.227689][T18444] bridge_slave_1: entered allmulticast mode [ 889.278181][T18444] bridge_slave_1: entered promiscuous mode [ 889.468481][T18444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.562739][T18444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.092906][T18444] team0: Port device team_slave_0 added [ 890.137911][T16798] Bluetooth: hci1: command tx timeout [ 890.175537][T18444] team0: Port device team_slave_1 added [ 890.432476][T18444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.487342][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.644203][T14241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.654702][T14241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.663565][T14241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.671473][T14241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.687820][T14241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.724052][T18444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.988728][T18444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.045620][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.169016][T18444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.217290][T14241] Bluetooth: hci1: command tx timeout [ 892.243978][T18444] hsr_slave_0: entered promiscuous mode [ 892.261353][T18444] hsr_slave_1: entered promiscuous mode [ 892.281384][T18444] debugfs: 'hsr0' already exists in 'hsr' [ 892.287133][T18444] Cannot create hsr debugfs directory [ 892.464510][T18473] chnl_net:caif_netlink_parms(): no params data found [ 892.767418][T14241] Bluetooth: hci3: command tx timeout [ 894.160622][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.198841][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.227591][T18473] bridge_slave_0: entered allmulticast mode [ 894.245016][T18473] bridge_slave_0: entered promiscuous mode [ 894.287753][T14241] Bluetooth: hci1: command tx timeout [ 894.506972][T18444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.566773][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.597466][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.608115][T18473] bridge_slave_1: entered allmulticast mode [ 894.638156][T18473] bridge_slave_1: entered promiscuous mode [ 894.847420][T14241] Bluetooth: hci3: command tx timeout [ 895.258697][T18516] random: crng reseeded on system resumption [ 895.342183][T18516] hub 1-0:1.0: USB hub found [ 895.377841][T18516] hub 1-0:1.0: 1 port detected [ 895.634537][T18444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.703574][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.752531][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.920443][T18444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.202651][T18473] team0: Port device team_slave_0 added [ 896.233980][T18473] team0: Port device team_slave_1 added [ 896.359755][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.367684][T14241] Bluetooth: hci1: command tx timeout [ 896.397096][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.487351][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.524075][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.555073][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.668198][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.885214][T18444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.927440][T14241] Bluetooth: hci3: command tx timeout [ 897.071295][T18473] hsr_slave_0: entered promiscuous mode [ 897.099395][T18473] hsr_slave_1: entered promiscuous mode [ 897.148256][T18473] debugfs: 'hsr0' already exists in 'hsr' [ 897.154034][T18473] Cannot create hsr debugfs directory [ 897.592770][T18444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.743429][T18444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 897.837023][T18444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 897.928326][T18444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.402392][T18473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 898.521770][T18547] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2446'. [ 898.564173][T18547] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.899378][T18473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 899.008081][T14241] Bluetooth: hci3: command tx timeout [ 899.205139][T18549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.283710][T18557] sctp: [Deprecated]: syz.0.2448 (pid 18557) Use of int in max_burst socket option. [ 899.283710][T18557] Use struct sctp_assoc_value instead [ 899.336549][T18557] openvswitch: netlink: Duplicate key (type 15). [ 899.942017][T18473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 899.981966][T18473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 900.210888][T18444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.315674][T18444] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.381256][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.388408][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.465100][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.472255][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.700683][T18444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.831844][T18473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.939114][T18473] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.014299][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.021466][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.139455][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.146605][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.770618][T18444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.168413][T18444] veth0_vlan: entered promiscuous mode [ 902.245512][T18444] veth1_vlan: entered promiscuous mode [ 902.424754][T18444] veth0_macvtap: entered promiscuous mode [ 902.469715][T18444] veth1_macvtap: entered promiscuous mode [ 902.558112][T18473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.584191][T18588] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2452'. [ 902.659129][T18444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.729767][T18444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.829718][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.878787][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.055069][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.101151][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.264027][ T7981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.327764][ T7981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.441335][ T7981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.468421][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.654964][T18473] veth0_vlan: entered promiscuous mode [ 905.744957][T18473] veth1_vlan: entered promiscuous mode [ 905.928428][T18473] veth0_macvtap: entered promiscuous mode [ 905.992989][T18473] veth1_macvtap: entered promiscuous mode [ 906.078524][T18473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.142004][T18473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.240300][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.290895][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.340801][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.382583][ T8428] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.807741][T18608] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 907.818859][T14241] Bluetooth: hci4: command 0x0c1a tx timeout [ 908.298341][T18608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 908.317579][T18608] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 908.348441][T18608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 908.387477][T18608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 908.413972][T18608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 908.455727][T18608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 908.683600][T18608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 908.707041][T18608] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 908.824628][T18608] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 909.089224][ T8233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.097072][ T8233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.271227][ T8233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.320660][ T8233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.887713][T14241] Bluetooth: hci2: command 0x0c1a tx timeout [ 910.360684][T18640] lo: entered allmulticast mode [ 910.369054][T16798] Bluetooth: hci5: command 0x0c1a tx timeout [ 910.375761][T14241] Bluetooth: hci0: command 0x0c1a tx timeout [ 910.451198][T14241] Bluetooth: hci1: command 0x0c1a tx timeout [ 910.586904][T18634] lo: left allmulticast mode [ 910.767411][T14241] Bluetooth: hci3: command 0x0c1a tx timeout [ 911.828845][T18661] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2467'. [ 912.468556][T18665] zswap: compressor not available [ 912.527508][T14241] Bluetooth: hci1: command 0x0c1a tx timeout [ 912.847360][T14241] Bluetooth: hci3: command 0x0c1a tx timeout [ 914.611675][T14241] Bluetooth: hci1: command 0x0c1a tx timeout [ 914.927739][T14241] Bluetooth: hci3: command 0x0c1a tx timeout [ 915.632487][T18696] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2483'. [ 916.051863][T18697] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 919.054026][T18749] FAULT_INJECTION: forcing a failure. [ 919.054026][T18749] name failslab, interval 1, probability 0, space 0, times 0 [ 919.229656][T18757] bridge0: port 3(netdevsim1) entered blocking state [ 919.236911][T18749] CPU: 0 UID: 0 PID: 18749 Comm: syz.8.2486 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 919.236950][T18749] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 919.236961][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 919.236974][T18749] Call Trace: [ 919.236981][T18749] [ 919.236989][T18749] dump_stack_lvl+0x16c/0x1f0 [ 919.237028][T18749] should_fail_ex+0x512/0x640 [ 919.237053][T18749] ? kmem_cache_alloc_noprof+0x62/0x770 [ 919.237083][T18749] should_failslab+0xc2/0x120 [ 919.237117][T18749] kmem_cache_alloc_noprof+0x83/0x770 [ 919.237144][T18749] ? security_file_alloc+0x34/0x2b0 [ 919.237176][T18749] ? security_file_alloc+0x34/0x2b0 [ 919.237204][T18749] security_file_alloc+0x34/0x2b0 [ 919.237236][T18749] init_file+0x93/0x4c0 [ 919.237259][T18749] alloc_empty_file+0x73/0x1e0 [ 919.237283][T18749] alloc_file_pseudo+0x13a/0x230 [ 919.237309][T18749] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 919.237335][T18749] ? alloc_fd+0x471/0x7d0 [ 919.237381][T18749] sock_alloc_file+0x50/0x210 [ 919.237414][T18749] __sys_socket+0x1c0/0x260 [ 919.237436][T18749] ? __pfx___sys_socket+0x10/0x10 [ 919.237457][T18749] ? xfd_validate_state+0x61/0x180 [ 919.237485][T18749] __x64_sys_socket+0x72/0xb0 [ 919.237506][T18749] ? lockdep_hardirqs_on+0x7c/0x110 [ 919.237541][T18749] do_syscall_64+0xcd/0xf80 [ 919.237577][T18749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.237601][T18749] RIP: 0033:0x7f21ff58f7c9 [ 919.237618][T18749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.237640][T18749] RSP: 002b:00007f220036e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 919.237661][T18749] RAX: ffffffffffffffda RBX: 00007f21ff7e5fa0 RCX: 00007f21ff58f7c9 [ 919.237676][T18749] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 919.237690][T18749] RBP: 00007f21ff613f91 R08: 0000000000000000 R09: 0000000000000000 [ 919.237704][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.237717][T18749] R13: 00007f21ff7e6038 R14: 00007f21ff7e5fa0 R15: 00007ffebdb05f58 [ 919.237744][T18749] [ 919.747524][T18757] bridge0: port 3(netdevsim1) entered disabled state [ 919.779062][T18757] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 919.839115][T18757] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 919.944745][T18757] bridge0: port 3(netdevsim1) entered blocking state [ 919.951555][T18757] bridge0: port 3(netdevsim1) entered forwarding state [ 920.525056][T18773] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 923.666056][T18801] could not allocate digest TFM handle 0 [ 923.666056][T18801] [ 924.898044][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2497'. [ 925.612711][T18828] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2501'. [ 928.056959][T18856] FAULT_INJECTION: forcing a failure. [ 928.056959][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 928.166092][T18856] CPU: 0 UID: 0 PID: 18856 Comm: syz.3.2507 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 928.166137][T18856] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 928.166148][T18856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.166163][T18856] Call Trace: [ 928.166171][T18856] [ 928.166181][T18856] dump_stack_lvl+0x16c/0x1f0 [ 928.166222][T18856] should_fail_ex+0x512/0x640 [ 928.166250][T18856] ? __kmalloc_cache_noprof+0x5f/0x800 [ 928.166282][T18856] should_failslab+0xc2/0x120 [ 928.166320][T18856] __kmalloc_cache_noprof+0x80/0x800 [ 928.166350][T18856] ? kvm_arch_vcpu_create+0x375/0xb20 [ 928.166386][T18856] ? kvm_arch_vcpu_create+0x375/0xb20 [ 928.166415][T18856] kvm_arch_vcpu_create+0x375/0xb20 [ 928.166451][T18856] kvm_vm_ioctl+0x105e/0x4090 [ 928.166511][T18856] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 928.166558][T18856] ? kasan_quarantine_put+0x10a/0x240 [ 928.166592][T18856] ? lockdep_hardirqs_on+0x7c/0x110 [ 928.166634][T18856] ? find_held_lock+0x2b/0x80 [ 928.166668][T18856] ? tomoyo_path_number_perm+0x295/0x580 [ 928.166709][T18856] ? tomoyo_path_number_perm+0x18d/0x580 [ 928.166742][T18856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 928.166783][T18856] ? futex_wake+0x1ad/0x530 [ 928.166825][T18856] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 928.166865][T18856] ? do_vfs_ioctl+0x128/0x14f0 [ 928.166895][T18856] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 928.166945][T18856] ? find_held_lock+0x2b/0x80 [ 928.166976][T18856] ? hook_file_ioctl_common+0x144/0x410 [ 928.167011][T18856] ? __fget_files+0x20e/0x3c0 [ 928.167049][T18856] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 928.167081][T18856] __x64_sys_ioctl+0x18e/0x210 [ 928.167112][T18856] do_syscall_64+0xcd/0xf80 [ 928.167150][T18856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.167174][T18856] RIP: 0033:0x7fed5ed8f7c9 [ 928.167193][T18856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.167217][T18856] RSP: 002b:00007fed5fc5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.167243][T18856] RAX: ffffffffffffffda RBX: 00007fed5efe6090 RCX: 00007fed5ed8f7c9 [ 928.167259][T18856] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 928.167273][T18856] RBP: 00007fed5ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 928.167289][T18856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.167304][T18856] R13: 00007fed5efe6128 R14: 00007fed5efe6090 R15: 00007fffbc0f5608 [ 928.167334][T18856] [ 930.167928][T18869] zswap: compressor not available [ 930.454256][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'. [ 930.920182][T18886] netlink: 266 bytes leftover after parsing attributes in process `syz.6.2512'. [ 932.887412][T18923] netlink: 266 bytes leftover after parsing attributes in process `syz.3.2523'. [ 932.896492][T18923] IPv6: NLM_F_CREATE should be specified when creating new route [ 934.383578][T18927] kexec: Could not allocate control_code_buffer [ 935.532334][T18972] bridge0: port 4(batadv0) entered blocking state [ 935.568020][T18972] bridge0: port 4(batadv0) entered disabled state [ 935.602288][T18972] batadv0: entered allmulticast mode [ 935.643641][T18972] batadv0: entered promiscuous mode [ 935.697951][T18972] bridge0: port 4(batadv0) entered blocking state [ 935.704492][T18972] bridge0: port 4(batadv0) entered forwarding state [ 935.908693][ T6124] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 935.918287][ T6124] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 939.675314][T19028] netlink: 93 bytes leftover after parsing attributes in process `syz.6.2540'. [ 940.443572][T19047] Invalid ELF header magic: != ELF [ 941.491329][T19065] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 942.055968][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.067803][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.477970][T19083] Invalid ELF header magic: != ELF [ 944.276987][T19115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2556'. [ 944.444173][T14241] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 944.646473][T19114] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2556'. [ 945.110863][T19115] bond0: (slave bond_slave_1): Releasing backup interface [ 946.285442][T19152] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2564'. [ 946.350360][T19156] input: f as /devices/virtual/input/input31 [ 947.819651][T19139] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 947.883556][T19139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 947.938154][T19139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 948.536663][ T8425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.782682][ T8425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.075658][ T8425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.483474][ T8425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.659826][ T8425] bridge_slave_1: left allmulticast mode [ 950.665497][ T8425] bridge_slave_1: left promiscuous mode [ 950.764386][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.891026][ T8425] bridge_slave_0: left allmulticast mode [ 951.017276][ T8425] bridge_slave_0: left promiscuous mode [ 951.029028][T19221] cougar: G6 mapped to space [ 951.229552][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.585826][T18473] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 953.097839][T18473] CPU: 0 UID: 0 PID: 18473 Comm: syz-executor Tainted: G U I L syzkaller #0 PREEMPT(full) [ 953.097883][T18473] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 953.097895][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.097910][T18473] Call Trace: [ 953.097919][T18473] [ 953.097928][T18473] dump_stack_lvl+0x16c/0x1f0 [ 953.097970][T18473] dump_header+0x101/0x960 [ 953.097999][T18473] oom_kill_process+0x176/0x910 [ 953.098029][T18473] out_of_memory+0x350/0x1700 [ 953.098056][T18473] ? __lock_acquire+0x436/0x2890 [ 953.098082][T18473] ? __pfx_out_of_memory+0x10/0x10 [ 953.098116][T18473] mem_cgroup_out_of_memory+0x118/0x130 [ 953.098147][T18473] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 953.098183][T18473] ? do_raw_spin_unlock+0x172/0x230 [ 953.098216][T18473] try_charge_memcg+0x695/0xd30 [ 953.098259][T18473] ? __pfx_try_charge_memcg+0x10/0x10 [ 953.098303][T18473] ? find_held_lock+0x2b/0x80 [ 953.098339][T18473] charge_memcg+0x8a/0x230 [ 953.098377][T18473] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 953.098406][T18473] __read_swap_cache_async+0x397/0x500 [ 953.098440][T18473] ? __pfx___read_swap_cache_async+0x10/0x10 [ 953.098471][T18473] ? finish_task_switch.isra.0+0x202/0xbd0 [ 953.098507][T18473] ? rcu_is_watching+0x12/0xc0 [ 953.098541][T18473] ? finish_task_switch.isra.0+0x207/0xbd0 [ 953.098579][T18473] ? css_rstat_updated+0x1d1/0x590 [ 953.098606][T18473] swap_cluster_readahead+0x432/0x770 [ 953.098643][T18473] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 953.098678][T18473] ? trace_pelt_se_tp+0xed/0x130 [ 953.098700][T18473] ? __update_load_avg_se+0x3fb/0x940 [ 953.098749][T18473] ? update_load_avg+0x233/0x2220 [ 953.098773][T18473] ? get_vma_policy+0x242/0x3c0 [ 953.098797][T18473] swapin_readahead+0x160/0x1220 [ 953.098836][T18473] ? __pfx_swapin_readahead+0x10/0x10 [ 953.098868][T18473] ? find_held_lock+0x2b/0x80 [ 953.098898][T18473] ? swap_cache_get_folio+0x267/0x8e0 [ 953.098926][T18473] ? swap_cache_get_folio+0x267/0x8e0 [ 953.098952][T18473] ? swap_cache_get_folio+0x267/0x8e0 [ 953.098983][T18473] ? swap_cache_get_folio+0x267/0x8e0 [ 953.099011][T18473] ? swap_cache_get_folio+0x293/0x8e0 [ 953.099041][T18473] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 953.099069][T18473] ? __pfx_get_swap_device+0x10/0x10 [ 953.099104][T18473] ? rcu_read_unlock+0x2d/0xb0 [ 953.099136][T18473] ? do_swap_page+0x962/0x64a0 [ 953.099163][T18473] do_swap_page+0x962/0x64a0 [ 953.099192][T18473] ? __lock_acquire+0x436/0x2890 [ 953.099221][T18473] ? __pfx_do_swap_page+0x10/0x10 [ 953.099249][T18473] ? __pfx_default_wake_function+0x10/0x10 [ 953.099284][T18473] ? rcu_is_watching+0x12/0xc0 [ 953.099316][T18473] ? __free_object+0x286/0x410 [ 953.099359][T18473] ? rcu_is_watching+0x12/0xc0 [ 953.099392][T18473] ? ___pte_offset_map+0x175/0x380 [ 953.099431][T18473] __handle_mm_fault+0x19cb/0x2bb0 [ 953.099461][T18473] ? reacquire_held_locks+0xcd/0x1f0 [ 953.099485][T18473] ? __pfx___handle_mm_fault+0x10/0x10 [ 953.099513][T18473] ? lock_vma_under_rcu+0x176/0x580 [ 953.099548][T18473] ? get_timespec64+0x136/0x1b0 [ 953.099585][T18473] handle_mm_fault+0x3fe/0xad0 [ 953.099616][T18473] do_user_addr_fault+0x60c/0x1370 [ 953.099648][T18473] ? rcu_is_watching+0x12/0xc0 [ 953.099684][T18473] exc_page_fault+0x64/0xc0 [ 953.099721][T18473] asm_exc_page_fault+0x26/0x30 [ 953.099744][T18473] RIP: 0033:0x7f21ff5c2088 [ 953.099764][T18473] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 953.099787][T18473] RSP: 002b:00007ffebdb06270 EFLAGS: 00010293 [ 953.099806][T18473] RAX: 0000000000000000 RBX: 0000000000000066 RCX: 00007f21ff5c2085 [ 953.099822][T18473] RDX: 00007ffebdb062b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.099837][T18473] RBP: 00007ffebdb0631c R08: 0000000000000000 R09: 0000000000000000 [ 953.099852][T18473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 953.099867][T18473] R13: 00000000000927c0 R14: 00000000000e7ad9 R15: 00007ffebdb06370 [ 953.099898][T18473] [ 953.938917][T18473] memory: usage 3072kB, limit 3072kB, failcnt 2219 [ 953.945456][T18473] memory+swap: usage 7300kB, limit 9007199254740988kB, failcnt 0 [ 953.979518][T18473] kmem: usage 996kB, limit 9007199254740988kB, failcnt 0 [ 953.986574][T18473] Memory cgroup stats for /syz8: [ 953.986829][T18473] cache 0 [ 954.017374][T18473] rss 0 [ 954.020175][T18473] rss_huge 0 [ 954.024425][T18473] shmem 0 [ 954.041411][T18473] mapped_file 0 [ 954.044903][T18473] dirty 0 [ 954.059804][T18473] writeback 0 [ 954.110998][T18473] workingset_refault_anon 314 [ 954.115739][T18473] workingset_refault_file 0 [ 954.137565][T18473] swap 4329472 [ 954.157291][T18473] swapcached 28672 [ 954.161060][T18473] pgpgin 21837 [ 954.165052][T18473] pgpgout 21829 [ 954.196518][T18473] pgfault 33962 [ 954.206608][T18473] pgmajfault 192 [ 954.227346][T18473] inactive_anon 28672 [ 954.231394][T18473] active_anon 0 [ 954.234858][T18473] inactive_file 0 [ 954.267139][T18473] active_file 0 [ 954.278399][T18473] unevictable 0 [ 954.297576][T18473] hierarchical_memory_limit 3145728 [ 954.317324][T18473] hierarchical_memsw_limit 9223372036854771712 [ 954.338957][T18473] total_cache 0 [ 954.342449][T18473] total_rss 0 [ 954.345742][T18473] total_rss_huge 0 [ 954.361313][T18473] total_shmem 0 [ 954.387354][T18473] total_mapped_file 0 [ 954.391366][T18473] total_dirty 0 [ 954.394818][T18473] total_writeback 0 [ 954.437272][T18473] total_workingset_refault_anon 314 [ 954.442498][T18473] total_workingset_refault_file 0 [ 954.470080][T18473] total_swap 4329472 [ 954.474007][T18473] total_swapcached 28672 [ 954.501789][T18473] total_pgpgin 21837 [ 954.507667][T18473] total_pgpgout 21829 [ 954.517963][T18473] total_pgfault 33962 [ 954.521953][T18473] total_pgmajfault 192 [ 954.526018][T18473] total_inactive_anon 28672 [ 954.557316][T18473] total_active_anon 0 [ 954.561345][T18473] total_inactive_file 0 [ 954.565495][T18473] total_active_file 0 [ 954.617470][T18473] total_unevictable 0 [ 954.627299][T18473] anon_cost 0 [ 954.630623][T18473] file_cost 0 [ 954.633937][T18473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2570,pid=19181,uid=0 [ 954.722966][T18473] Memory cgroup out of memory: Killed process 19181 (syz.8.2570) total-vm:131548kB, anon-rss:1268kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 955.776858][ T8425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.798399][ T8425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.819412][ T8425] bond0 (unregistering): Released all slaves [ 956.517838][ T8425] hsr_slave_0: left promiscuous mode [ 956.566973][ T8425] hsr_slave_1: left promiscuous mode [ 956.622639][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.687126][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.742172][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.796533][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.951845][ T8425] veth1_macvtap: left promiscuous mode [ 957.000050][ T8425] veth0_macvtap: left promiscuous mode [ 957.061537][ T8425] veth1_vlan: left promiscuous mode [ 957.113507][ T8425] veth0_vlan: left promiscuous mode [ 960.723881][ T8425] team0 (unregistering): Port device team_slave_1 removed [ 960.809385][ T8425] team0 (unregistering): Port device team_slave_0 removed [ 962.868646][T19333] random: crng reseeded on system resumption [ 964.032948][T19358] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2597'. [ 964.995448][ T31] audit: type=1804 audit(4294967420.240:27): pid=19376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2602" name="/newroot/87/file0" dev="tmpfs" ino=488 res=1 errno=0 [ 968.168174][T19444] netlink: 'syz.0.2612': attribute type 23 has an invalid length. [ 969.240464][T19464] nvme_fcloop: unknown parameter or missing value '0' [ 972.146114][T19518] input: f as /devices/virtual/input/input32 [ 972.804055][T19538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 976.424097][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2641'. [ 977.267684][T14241] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 977.921581][T19645] netlink: 'syz.6.2650': attribute type 1 has an invalid length. [ 978.778870][T14241] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 978.803770][T19652] netlink: 202 bytes leftover after parsing attributes in process `syz.8.2652'. [ 982.511537][T19743] hub 1-0:1.0: USB hub found [ 982.574893][T19743] hub 1-0:1.0: 1 port detected [ 986.436266][ T31] audit: type=1800 audit(4294967441.680:28): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2677" name="discovery_nqn" dev="configfs" ino=82634 res=0 errno=0 [ 986.696897][T19821] batman_adv: Routing algorithm '' is not supported [ 990.662122][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 992.562687][T19916] IPVS: length: 131 != 8 [ 993.102262][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2696'. [ 994.727157][T19930] bridge0: port 3(dummy0) entered blocking state [ 994.760416][T19930] bridge0: port 3(dummy0) entered disabled state [ 994.804364][T19930] dummy0: entered allmulticast mode [ 994.865553][T19930] dummy0: entered promiscuous mode [ 994.954504][T19930] bridge0: port 3(dummy0) entered blocking state [ 994.961110][T19930] bridge0: port 3(dummy0) entered forwarding state [ 995.527758][T19953] FAULT_INJECTION: forcing a failure. [ 995.527758][T19953] name fail_futex, interval 1, probability 0, space 0, times 0 [ 995.805106][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.0.2703 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 995.805162][T19953] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 995.805174][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 995.805190][T19953] Call Trace: [ 995.805198][T19953] [ 995.805207][T19953] dump_stack_lvl+0x16c/0x1f0 [ 995.805248][T19953] should_fail_ex+0x512/0x640 [ 995.805280][T19953] get_futex_key+0x1d0/0x15f0 [ 995.805310][T19953] ? __pfx_get_futex_key+0x10/0x10 [ 995.805346][T19953] futex_wake+0xea/0x530 [ 995.805383][T19953] ? __pfx_futex_wake+0x10/0x10 [ 995.805428][T19953] ? lockdep_init_map_type+0x5c/0x270 [ 995.805460][T19953] do_futex+0x1e3/0x350 [ 995.805489][T19953] ? __pfx_do_futex+0x10/0x10 [ 995.805526][T19953] __x64_sys_futex+0x1e0/0x4c0 [ 995.805557][T19953] ? fd_install+0x223/0x570 [ 995.805593][T19953] ? __pfx___x64_sys_futex+0x10/0x10 [ 995.805638][T19953] do_syscall_64+0xcd/0xf80 [ 995.805678][T19953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.805702][T19953] RIP: 0033:0x7f3ec358f7c9 [ 995.805722][T19953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.805748][T19953] RSP: 002b:00007f3ec443d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 995.805771][T19953] RAX: ffffffffffffffda RBX: 00007f3ec37e6098 RCX: 00007f3ec358f7c9 [ 995.805787][T19953] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ec37e609c [ 995.805802][T19953] RBP: 00007f3ec37e6090 R08: 00007f3ec445f000 R09: 0000000000000000 [ 995.805818][T19953] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 995.805833][T19953] R13: 00007f3ec37e6128 R14: 00007ffe2fd2d390 R15: 00007ffe2fd2d478 [ 995.805863][T19953] [ 998.504548][T19987] FAULT_INJECTION: forcing a failure. [ 998.504548][T19987] name failslab, interval 1, probability 0, space 0, times 0 [ 998.627180][T19985] __vm_enough_memory: pid: 19985, comm: syz.3.2708, bytes: 8589938688 not enough memory for the allocation [ 998.693015][T19987] CPU: 0 UID: 0 PID: 19987 Comm: syz.0.2709 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 998.693060][T19987] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 998.693072][T19987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 998.693087][T19987] Call Trace: [ 998.693096][T19987] [ 998.693106][T19987] dump_stack_lvl+0x16c/0x1f0 [ 998.693148][T19987] should_fail_ex+0x512/0x640 [ 998.693177][T19987] ? __kmalloc_noprof+0xca/0x910 [ 998.693207][T19987] should_failslab+0xc2/0x120 [ 998.693246][T19987] __kmalloc_noprof+0xeb/0x910 [ 998.693273][T19987] ? usb_hcd_submit_urb+0x5cf/0x1cf0 [ 998.693313][T19987] ? usb_hcd_submit_urb+0x5cf/0x1cf0 [ 998.693348][T19987] usb_hcd_submit_urb+0x5cf/0x1cf0 [ 998.693390][T19987] usb_submit_urb+0x899/0x1970 [ 998.693433][T19987] ? __init_swait_queue_head+0xca/0x150 [ 998.693467][T19987] usb_start_wait_urb+0x104/0x4e0 [ 998.693509][T19987] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 998.693559][T19987] ? __asan_memset+0x23/0x50 [ 998.693593][T19987] usb_control_msg+0x326/0x4a0 [ 998.693633][T19987] ? __pfx_usb_control_msg+0x10/0x10 [ 998.693673][T19987] ? __lock_acquire+0x436/0x2890 [ 998.693702][T19987] hub_ext_port_status+0x14e/0x670 [ 998.693749][T19987] hub_activate+0x6e5/0x1d90 [ 998.693780][T19987] ? __pfx_hub_activate+0x10/0x10 [ 998.693801][T19987] ? find_held_lock+0x2b/0x80 [ 998.693833][T19987] ? do_proc_control+0x1020/0x10a0 [ 998.693879][T19987] hub_resume+0xa8/0x400 [ 998.693902][T19987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.693944][T19987] ? __pfx_hub_resume+0x10/0x10 [ 998.693975][T19987] ? __pfx_hcd_bus_resume+0x10/0x10 [ 998.694009][T19987] ? finish_task_switch.isra.0+0x2e0/0xbd0 [ 998.694049][T19987] usb_resume_interface.constprop.0.isra.0+0x2c5/0x400 [ 998.694087][T19987] usb_resume_both+0x237/0x9b0 [ 998.694126][T19987] ? __pfx_usb_resume_both+0x10/0x10 [ 998.694160][T19987] ? __pfx_usb_runtime_resume+0x10/0x10 [ 998.694197][T19987] ? __pfx_usb_runtime_resume+0x10/0x10 [ 998.694233][T19987] __rpm_callback+0xc8/0x610 [ 998.694264][T19987] ? __pfx_usb_runtime_resume+0x10/0x10 [ 998.694299][T19987] rpm_callback+0x1b7/0x200 [ 998.694326][T19987] ? __pfx_usb_runtime_resume+0x10/0x10 [ 998.694361][T19987] rpm_resume+0xceb/0x12f0 [ 998.694396][T19987] ? __pfx_rpm_resume+0x10/0x10 [ 998.694422][T19987] ? do_raw_spin_lock+0x12c/0x2b0 [ 998.694451][T19987] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 998.694490][T19987] __pm_runtime_resume+0xb6/0x170 [ 998.694522][T19987] usb_autoresume_device+0x23/0xe0 [ 998.694558][T19987] usbdev_open+0x228/0x8b0 [ 998.694593][T19987] ? kobject_get_unless_zero+0x156/0x1e0 [ 998.694635][T19987] ? __pfx_usbdev_open+0x10/0x10 [ 998.694670][T19987] ? chrdev_open+0x10b/0x6a0 [ 998.694712][T19987] ? __pfx_usbdev_open+0x10/0x10 [ 998.694746][T19987] chrdev_open+0x234/0x6a0 [ 998.694783][T19987] ? __pfx_apparmor_file_open+0x10/0x10 [ 998.694809][T19987] ? __pfx_chrdev_open+0x10/0x10 [ 998.694849][T19987] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 998.694895][T19987] do_dentry_open+0x748/0x1590 [ 998.694931][T19987] ? __pfx_chrdev_open+0x10/0x10 [ 998.694986][T19987] vfs_open+0x82/0x3f0 [ 998.695016][T19987] path_openat+0x2078/0x3140 [ 998.695063][T19987] ? __pfx_path_openat+0x10/0x10 [ 998.695112][T19987] do_filp_open+0x20b/0x470 [ 998.695151][T19987] ? __pfx_do_filp_open+0x10/0x10 [ 998.695210][T19987] ? alloc_fd+0x471/0x7d0 [ 998.695255][T19987] do_sys_openat2+0x121/0x290 [ 998.695283][T19987] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.695323][T19987] __x64_sys_openat+0x174/0x210 [ 998.695352][T19987] ? __pfx___x64_sys_openat+0x10/0x10 [ 998.695393][T19987] do_syscall_64+0xcd/0xf80 [ 998.695434][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.695460][T19987] RIP: 0033:0x7f3ec358f7c9 [ 998.695481][T19987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.695505][T19987] RSP: 002b:00007f3ec445e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 998.695528][T19987] RAX: ffffffffffffffda RBX: 00007f3ec37e5fa0 RCX: 00007f3ec358f7c9 [ 998.695545][T19987] RDX: 000000000004a901 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 998.695560][T19987] RBP: 00007f3ec3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 998.695575][T19987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.695590][T19987] R13: 00007f3ec37e6038 R14: 00007f3ec37e5fa0 R15: 00007ffe2fd2d478 [ 998.695621][T19987] [ 1000.188631][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2712'. [ 1000.485680][T19987] hub 15-0:1.0: hub_ext_port_status failed (err = -12) [ 1000.716719][T20002] sd 0:0:1:0: PR command failed: 1026 [ 1000.798832][T20002] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1000.962713][T20002] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1001.315049][T20020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2717'. [ 1003.238794][T20058] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2724'. [ 1003.292821][T20049] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2724'. [ 1003.495548][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.505963][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.538692][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1009.723667][T20203] zswap: compressor not available [ 1011.776847][T20260] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 1011.815071][T20265] FAULT_INJECTION: forcing a failure. [ 1011.815071][T20265] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.934453][T20265] CPU: 0 UID: 0 PID: 20265 Comm: syz.0.2750 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1011.934500][T20265] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1011.934512][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1011.934528][T20265] Call Trace: [ 1011.934537][T20265] [ 1011.934546][T20265] dump_stack_lvl+0x16c/0x1f0 [ 1011.934588][T20265] should_fail_ex+0x512/0x640 [ 1011.934616][T20265] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1011.934648][T20265] should_failslab+0xc2/0x120 [ 1011.934687][T20265] __kmalloc_cache_noprof+0x80/0x800 [ 1011.934716][T20265] ? sctp_auth_shkey_create+0x9e/0x210 [ 1011.934761][T20265] ? sctp_auth_shkey_create+0x9e/0x210 [ 1011.934799][T20265] sctp_auth_shkey_create+0x9e/0x210 [ 1011.934840][T20265] sctp_endpoint_new+0x589/0xb20 [ 1011.934890][T20265] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1011.934934][T20265] ? lockdep_init_map_type+0x5c/0x270 [ 1011.934965][T20265] sctp_init_sock+0xe2b/0x1310 [ 1011.935002][T20265] ? __pfx_sctp_init_sock+0x10/0x10 [ 1011.935041][T20265] inet_create+0x939/0x1040 [ 1011.935071][T20265] ? inet_create+0x93/0x1040 [ 1011.935104][T20265] __sock_create+0x339/0x8a0 [ 1011.935133][T20265] __sys_socket+0x14d/0x260 [ 1011.935156][T20265] ? fput+0x70/0xf0 [ 1011.935179][T20265] ? __pfx___sys_socket+0x10/0x10 [ 1011.935203][T20265] ? xfd_validate_state+0x61/0x180 [ 1011.935226][T20265] ? __pfx_ksys_write+0x10/0x10 [ 1011.935268][T20265] __x64_sys_socket+0x72/0xb0 [ 1011.935290][T20265] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.935329][T20265] do_syscall_64+0xcd/0xf80 [ 1011.935369][T20265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.935394][T20265] RIP: 0033:0x7f3ec358f7c9 [ 1011.935414][T20265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.935439][T20265] RSP: 002b:00007f3ec445e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1011.935462][T20265] RAX: ffffffffffffffda RBX: 00007f3ec37e5fa0 RCX: 00007f3ec358f7c9 [ 1011.935480][T20265] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1011.935495][T20265] RBP: 00007f3ec3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1011.935511][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.935526][T20265] R13: 00007f3ec37e6038 R14: 00007f3ec37e5fa0 R15: 00007ffe2fd2d478 [ 1011.935558][T20265] [ 1012.678056][T20273] random: crng reseeded on system resumption [ 1013.917451][T20298] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1014.177558][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 1014.558364][T20309] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1016.774510][T20353] FAULT_INJECTION: forcing a failure. [ 1016.774510][T20353] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.860894][T20353] CPU: 0 UID: 0 PID: 20353 Comm: syz.6.2770 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1016.860943][T20353] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1016.860955][T20353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1016.860971][T20353] Call Trace: [ 1016.860980][T20353] [ 1016.860989][T20353] dump_stack_lvl+0x16c/0x1f0 [ 1016.861034][T20353] should_fail_ex+0x512/0x640 [ 1016.861063][T20353] ? fs_reclaim_acquire+0xae/0x150 [ 1016.861106][T20353] should_failslab+0xc2/0x120 [ 1016.861146][T20353] __kmalloc_noprof+0xeb/0x910 [ 1016.861173][T20353] ? tomoyo_profile+0x47/0x60 [ 1016.861210][T20353] ? tomoyo_supervisor+0x45b/0x13b0 [ 1016.861254][T20353] ? tomoyo_supervisor+0x45b/0x13b0 [ 1016.861292][T20353] tomoyo_supervisor+0x45b/0x13b0 [ 1016.861337][T20353] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1016.861375][T20353] ? __pfx_vsnprintf+0x10/0x10 [ 1016.861411][T20353] ? kasan_quarantine_put+0x10a/0x240 [ 1016.861460][T20353] ? tomoyo_encode+0x31/0x50 [ 1016.861509][T20353] tomoyo_path_number_perm+0x448/0x580 [ 1016.861541][T20353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1016.861574][T20353] ? futex_wake+0x1ad/0x530 [ 1016.861636][T20353] ? find_held_lock+0x2b/0x80 [ 1016.861668][T20353] ? hook_file_ioctl_common+0x144/0x410 [ 1016.861704][T20353] ? __fget_files+0x20e/0x3c0 [ 1016.861750][T20353] security_file_ioctl+0x9b/0x240 [ 1016.861785][T20353] __x64_sys_ioctl+0xb7/0x210 [ 1016.861818][T20353] do_syscall_64+0xcd/0xf80 [ 1016.861858][T20353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.861883][T20353] RIP: 0033:0x7fc67cf8f7c9 [ 1016.861904][T20353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.861929][T20353] RSP: 002b:00007fc67dd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.861954][T20353] RAX: ffffffffffffffda RBX: 00007fc67d1e5fa0 RCX: 00007fc67cf8f7c9 [ 1016.861971][T20353] RDX: 0000000000000038 RSI: 0000000080026f47 RDI: 0000000000000008 [ 1016.861987][T20353] RBP: 00007fc67d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1016.862002][T20353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.862030][T20353] R13: 00007fc67d1e6038 R14: 00007fc67d1e5fa0 R15: 00007fff15b6e518 [ 1016.862064][T20353] [ 1017.758142][T20358] FAULT_INJECTION: forcing a failure. [ 1017.758142][T20358] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.822127][ T31] audit: type=1800 audit(4294967473.000:29): pid=20358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2771" name="dbroot" dev="configfs" ino=85752 res=0 errno=0 [ 1017.858212][T20358] CPU: 0 UID: 0 PID: 20358 Comm: syz.0.2771 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1017.858266][T20358] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1017.858293][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1017.858309][T20358] Call Trace: [ 1017.858321][T20358] [ 1017.858333][T20358] dump_stack_lvl+0x16c/0x1f0 [ 1017.858377][T20358] should_fail_ex+0x512/0x640 [ 1017.858406][T20358] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1017.858451][T20358] should_failslab+0xc2/0x120 [ 1017.858491][T20358] __kmalloc_cache_noprof+0x80/0x800 [ 1017.858525][T20358] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1017.858867][T20358] ? dummy_hrtimer_create+0x45/0x170 [ 1017.858900][T20358] ? dummy_hrtimer_create+0x45/0x170 [ 1017.858926][T20358] dummy_hrtimer_create+0x45/0x170 [ 1017.858954][T20358] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 1017.858981][T20358] dummy_pcm_open+0xd4/0x5b0 [ 1017.859025][T20358] snd_pcm_open_substream+0xa60/0x1820 [ 1017.859059][T20358] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1017.859100][T20358] snd_pcm_open+0x29e/0x730 [ 1017.859134][T20358] ? __pfx_snd_pcm_open+0x10/0x10 [ 1017.859168][T20358] ? __pfx_default_wake_function+0x10/0x10 [ 1017.859211][T20358] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1017.859241][T20358] snd_pcm_capture_open+0x89/0xe0 [ 1017.859273][T20358] snd_open+0x22d/0x4c0 [ 1017.859311][T20358] ? __pfx_snd_open+0x10/0x10 [ 1017.859349][T20358] chrdev_open+0x234/0x6a0 [ 1017.859401][T20358] ? __pfx_apparmor_file_open+0x10/0x10 [ 1017.859429][T20358] ? __pfx_chrdev_open+0x10/0x10 [ 1017.859482][T20358] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1017.859537][T20358] do_dentry_open+0x748/0x1590 [ 1017.859575][T20358] ? __pfx_chrdev_open+0x10/0x10 [ 1017.859635][T20358] vfs_open+0x82/0x3f0 [ 1017.859666][T20358] path_openat+0x2078/0x3140 [ 1017.859715][T20358] ? __pfx_path_openat+0x10/0x10 [ 1017.859767][T20358] do_filp_open+0x20b/0x470 [ 1017.859813][T20358] ? __pfx_do_filp_open+0x10/0x10 [ 1017.859873][T20358] ? alloc_fd+0x471/0x7d0 [ 1017.859919][T20358] do_sys_openat2+0x121/0x290 [ 1017.859947][T20358] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.859988][T20358] __x64_sys_openat+0x174/0x210 [ 1017.860021][T20358] ? __pfx___x64_sys_openat+0x10/0x10 [ 1017.860064][T20358] do_syscall_64+0xcd/0xf80 [ 1017.860108][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.860136][T20358] RIP: 0033:0x7f3ec358f7c9 [ 1017.860160][T20358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.860184][T20358] RSP: 002b:00007f3ec445e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1017.860211][T20358] RAX: ffffffffffffffda RBX: 00007f3ec37e5fa0 RCX: 00007f3ec358f7c9 [ 1017.860228][T20358] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1017.860245][T20358] RBP: 00007f3ec3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1017.860261][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.860277][T20358] R13: 00007f3ec37e6038 R14: 00007f3ec37e5fa0 R15: 00007ffe2fd2d478 [ 1017.860310][T20358] [ 1019.451380][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1019.956264][T20373] ptrace attach of "./syz-executor exec"[17617] was attempted by ""[20373] [ 1021.786309][T20390] FAULT_INJECTION: forcing a failure. [ 1021.786309][T20390] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.800543][T20390] CPU: 0 UID: 0 PID: 20390 Comm: syz.8.2778 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1021.800602][T20390] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1021.800616][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1021.800634][T20390] Call Trace: [ 1021.800646][T20390] [ 1021.800657][T20390] dump_stack_lvl+0x16c/0x1f0 [ 1021.800703][T20390] should_fail_ex+0x512/0x640 [ 1021.800738][T20390] should_failslab+0xc2/0x120 [ 1021.800778][T20390] kmem_cache_alloc_noprof+0x83/0x770 [ 1021.800810][T20390] ? pcpu_alloc_noprof+0x94a/0x1470 [ 1021.800838][T20390] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1021.800879][T20390] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1021.800911][T20390] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1021.800951][T20390] idr_get_free+0x528/0xa30 [ 1021.801005][T20390] idr_alloc_u32+0x1ac/0x320 [ 1021.801052][T20390] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1021.801093][T20390] ? lock_acquire+0x179/0x330 [ 1021.801125][T20390] idr_alloc_cyclic+0x10b/0x230 [ 1021.801165][T20390] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1021.801203][T20390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1021.801237][T20390] ? lsm_blob_alloc+0x2b/0x90 [ 1021.801283][T20390] map_create+0x143c/0x2a10 [ 1021.801322][T20390] ? preempt_schedule_thunk+0x16/0x30 [ 1021.801359][T20390] ? __pfx_map_create+0x10/0x10 [ 1021.801395][T20390] ? __might_fault+0xe3/0x190 [ 1021.801426][T20390] ? __might_fault+0xe3/0x190 [ 1021.801454][T20390] ? __might_fault+0x13b/0x190 [ 1021.801503][T20390] __sys_bpf+0x3d9d/0x4980 [ 1021.801528][T20390] ? futex_private_hash_put+0x160/0x1b0 [ 1021.801560][T20390] ? __pfx___sys_bpf+0x10/0x10 [ 1021.801588][T20390] ? __pfx_futex_wake+0x10/0x10 [ 1021.801642][T20390] ? do_futex+0x122/0x350 [ 1021.801690][T20390] ? fput+0x70/0xf0 [ 1021.801717][T20390] ? xfd_validate_state+0x61/0x180 [ 1021.801741][T20390] ? __pfx_ksys_write+0x10/0x10 [ 1021.801786][T20390] __x64_sys_bpf+0x78/0xc0 [ 1021.801811][T20390] ? lockdep_hardirqs_on+0x7c/0x110 [ 1021.801853][T20390] do_syscall_64+0xcd/0xf80 [ 1021.801896][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.801924][T20390] RIP: 0033:0x7f21ff58f7c9 [ 1021.801948][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.801975][T20390] RSP: 002b:00007f220036e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1021.802007][T20390] RAX: ffffffffffffffda RBX: 00007f21ff7e5fa0 RCX: 00007f21ff58f7c9 [ 1021.802025][T20390] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1021.802042][T20390] RBP: 00007f21ff613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1021.802059][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.802075][T20390] R13: 00007f21ff7e6038 R14: 00007f21ff7e5fa0 R15: 00007ffebdb05f58 [ 1021.802110][T20390] [ 1023.117467][T20396] FAULT_INJECTION: forcing a failure. [ 1023.117467][T20396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.117639][T20396] CPU: 0 UID: 0 PID: 20396 Comm: syz.3.2779 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1023.117681][T20396] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1023.117693][T20396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.117709][T20396] Call Trace: [ 1023.117717][T20396] [ 1023.117727][T20396] dump_stack_lvl+0x16c/0x1f0 [ 1023.117771][T20396] should_fail_ex+0x512/0x640 [ 1023.117804][T20396] should_fail_alloc_page+0xe7/0x130 [ 1023.117846][T20396] prepare_alloc_pages+0x401/0x670 [ 1023.117916][T20396] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1023.117949][T20396] ? lock_acquire+0x179/0x330 [ 1023.117973][T20396] ? find_held_lock+0x2b/0x80 [ 1023.118006][T20396] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1023.118044][T20396] ? rcu_is_watching+0x12/0xc0 [ 1023.118078][T20396] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1023.118114][T20396] ? lockdep_hardirqs_on+0x7c/0x110 [ 1023.118152][T20396] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1023.118187][T20396] ? trace_sched_exit_tp+0xd1/0x110 [ 1023.118222][T20396] ? __schedule+0x10b9/0x6150 [ 1023.118259][T20396] ? __lock_acquire+0x436/0x2890 [ 1023.118289][T20396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.118332][T20396] ? policy_nodemask+0xea/0x4e0 [ 1023.118373][T20396] alloc_pages_mpol+0x1fb/0x550 [ 1023.118412][T20396] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1023.118459][T20396] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1023.118487][T20396] vma_alloc_folio_noprof+0xed/0x1e0 [ 1023.118512][T20396] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1023.118547][T20396] do_anonymous_page+0xc81/0x2190 [ 1023.118583][T20396] __handle_mm_fault+0x1ecf/0x2bb0 [ 1023.118615][T20396] ? reacquire_held_locks+0xcd/0x1f0 [ 1023.118639][T20396] ? __pfx___handle_mm_fault+0x10/0x10 [ 1023.118670][T20396] ? lock_vma_under_rcu+0x176/0x580 [ 1023.118718][T20396] handle_mm_fault+0x3fe/0xad0 [ 1023.118754][T20396] do_user_addr_fault+0x60c/0x1370 [ 1023.118789][T20396] ? rcu_is_watching+0x12/0xc0 [ 1023.118830][T20396] exc_page_fault+0x64/0xc0 [ 1023.118874][T20396] asm_exc_page_fault+0x26/0x30 [ 1023.118898][T20396] RIP: 0033:0x7fed5ec5a65b [ 1023.118920][T20396] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1023.118944][T20396] RSP: 002b:00007fed5fc58fb0 EFLAGS: 00010202 [ 1023.118964][T20396] RAX: 0000000000000000 RBX: 00007fed5efe6090 RCX: 0000000000000000 [ 1023.118980][T20396] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001340 [ 1023.118997][T20396] RBP: 00007fed5ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1023.119012][T20396] R10: 0000200000001340 R11: 0000000000000000 R12: 0000000000000000 [ 1023.119028][T20396] R13: 00007fed5efe6128 R14: 00007fed5efe6090 R15: 00007fffbc0f5608 [ 1023.119061][T20396] [ 1023.129481][T20396] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1032.701139][ T31] audit: type=1800 audit(4294967487.950:30): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2794" name="dbroot" dev="configfs" ino=86383 res=0 errno=0 [ 1032.753401][T20469] FAULT_INJECTION: forcing a failure. [ 1032.753401][T20469] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.824692][T20469] CPU: 0 UID: 0 PID: 20469 Comm: syz.8.2794 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1032.824743][T20469] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1032.824755][T20469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.824770][T20469] Call Trace: [ 1032.824778][T20469] [ 1032.824789][T20469] dump_stack_lvl+0x16c/0x1f0 [ 1032.824831][T20469] should_fail_ex+0x512/0x640 [ 1032.824860][T20469] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1032.824892][T20469] should_failslab+0xc2/0x120 [ 1032.824937][T20469] __kmalloc_cache_noprof+0x80/0x800 [ 1032.824965][T20469] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1032.825004][T20469] ? dummy_hrtimer_create+0x45/0x170 [ 1032.825037][T20469] ? dummy_hrtimer_create+0x45/0x170 [ 1032.825062][T20469] dummy_hrtimer_create+0x45/0x170 [ 1032.825089][T20469] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 1032.825121][T20469] dummy_pcm_open+0xd4/0x5b0 [ 1032.825162][T20469] snd_pcm_open_substream+0xa60/0x1820 [ 1032.825201][T20469] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1032.825241][T20469] snd_pcm_open+0x29e/0x730 [ 1032.825274][T20469] ? __pfx_snd_pcm_open+0x10/0x10 [ 1032.825309][T20469] ? __pfx_default_wake_function+0x10/0x10 [ 1032.825353][T20469] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1032.825384][T20469] snd_pcm_capture_open+0x89/0xe0 [ 1032.825417][T20469] snd_open+0x22d/0x4c0 [ 1032.825461][T20469] ? __pfx_snd_open+0x10/0x10 [ 1032.825499][T20469] chrdev_open+0x234/0x6a0 [ 1032.825537][T20469] ? __pfx_apparmor_file_open+0x10/0x10 [ 1032.825563][T20469] ? __pfx_chrdev_open+0x10/0x10 [ 1032.825603][T20469] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1032.825650][T20469] do_dentry_open+0x748/0x1590 [ 1032.825687][T20469] ? __pfx_chrdev_open+0x10/0x10 [ 1032.825733][T20469] vfs_open+0x82/0x3f0 [ 1032.825763][T20469] path_openat+0x2078/0x3140 [ 1032.825811][T20469] ? __pfx_path_openat+0x10/0x10 [ 1032.825859][T20469] do_filp_open+0x20b/0x470 [ 1032.825898][T20469] ? __pfx_do_filp_open+0x10/0x10 [ 1032.825957][T20469] ? alloc_fd+0x471/0x7d0 [ 1032.826002][T20469] do_sys_openat2+0x121/0x290 [ 1032.826036][T20469] ? __pfx_do_sys_openat2+0x10/0x10 [ 1032.826074][T20469] __x64_sys_openat+0x174/0x210 [ 1032.826120][T20469] ? __pfx___x64_sys_openat+0x10/0x10 [ 1032.826161][T20469] do_syscall_64+0xcd/0xf80 [ 1032.826202][T20469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.826229][T20469] RIP: 0033:0x7f21ff58f7c9 [ 1032.826250][T20469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.826276][T20469] RSP: 002b:00007f220036e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1032.826300][T20469] RAX: ffffffffffffffda RBX: 00007f21ff7e5fa0 RCX: 00007f21ff58f7c9 [ 1032.826317][T20469] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1032.826333][T20469] RBP: 00007f21ff613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1032.826349][T20469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.826365][T20469] R13: 00007f21ff7e6038 R14: 00007f21ff7e5fa0 R15: 00007ffebdb05f58 [ 1032.826396][T20469] [ 1036.691202][T20499] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2800'. [ 1042.247903][T14241] Bluetooth: hci0: unexpected event 0x31 length: 19 > 6 [ 1042.496639][T20565] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2811'. [ 1042.793021][T20565] overlayfs: missing 'lowerdir' [ 1042.800902][T20570] FAULT_INJECTION: forcing a failure. [ 1042.800902][T20570] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.856634][T20570] CPU: 0 UID: 0 PID: 20570 Comm: syz.0.2814 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1042.856681][T20570] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1042.856693][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1042.856708][T20570] Call Trace: [ 1042.856722][T20570] [ 1042.856733][T20570] dump_stack_lvl+0x16c/0x1f0 [ 1042.856776][T20570] should_fail_ex+0x512/0x640 [ 1042.856810][T20570] ? fs_reclaim_acquire+0xae/0x150 [ 1042.856856][T20570] should_failslab+0xc2/0x120 [ 1042.856894][T20570] __kmalloc_noprof+0xeb/0x910 [ 1042.856920][T20570] ? tomoyo_encode2+0x100/0x3e0 [ 1042.856958][T20570] ? tomoyo_encode2+0x100/0x3e0 [ 1042.856990][T20570] tomoyo_encode2+0x100/0x3e0 [ 1042.857026][T20570] tomoyo_encode+0x29/0x50 [ 1042.857058][T20570] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1042.857102][T20570] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1042.857134][T20570] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1042.857297][T20570] ? lock_acquire+0x179/0x330 [ 1042.857322][T20570] ? find_held_lock+0x2b/0x80 [ 1042.857355][T20570] ? mnt_get_write_access+0x52/0x2f0 [ 1042.857386][T20570] tomoyo_file_open+0x6b/0x90 [ 1042.857429][T20570] security_file_open+0x84/0x1e0 [ 1042.857462][T20570] do_dentry_open+0x597/0x1590 [ 1042.857511][T20570] ? security_inode_permission+0xbf/0x260 [ 1042.857544][T20570] vfs_open+0x82/0x3f0 [ 1042.857577][T20570] path_openat+0x2078/0x3140 [ 1042.857631][T20570] ? __pfx_path_openat+0x10/0x10 [ 1042.857679][T20570] do_filp_open+0x20b/0x470 [ 1042.857717][T20570] ? __pfx_do_filp_open+0x10/0x10 [ 1042.857776][T20570] ? alloc_fd+0x471/0x7d0 [ 1042.857820][T20570] do_sys_openat2+0x121/0x290 [ 1042.857848][T20570] ? __pfx_do_sys_openat2+0x10/0x10 [ 1042.857887][T20570] __x64_sys_openat+0x174/0x210 [ 1042.857916][T20570] ? __pfx___x64_sys_openat+0x10/0x10 [ 1042.857957][T20570] do_syscall_64+0xcd/0xf80 [ 1042.858000][T20570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.858027][T20570] RIP: 0033:0x7f3ec358f7c9 [ 1042.858049][T20570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.858073][T20570] RSP: 002b:00007f3ec445e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1042.858096][T20570] RAX: ffffffffffffffda RBX: 00007f3ec37e5fa0 RCX: 00007f3ec358f7c9 [ 1042.858112][T20570] RDX: 0000000000002641 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1042.858128][T20570] RBP: 00007f3ec3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1042.858142][T20570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.858156][T20570] R13: 00007f3ec37e6038 R14: 00007f3ec37e5fa0 R15: 00007ffe2fd2d478 [ 1042.858187][T20570] [ 1043.149496][T20566] tipc: Started in network mode [ 1043.155078][T20566] tipc: Node identity ee00, cluster identity 4711 [ 1043.162824][T20566] tipc: Node number set to 60928 [ 1043.223588][T20566] Invalid ELF header magic: != ELF [ 1044.553469][T20570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1045.251414][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2815'. [ 1046.324107][ T31] audit: type=1800 audit(4294967501.580:31): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2820" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1046.939747][ T31] audit: type=1800 audit(4294967502.190:32): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2821" name="#1012" dev="tmpfs" ino=1012 res=0 errno=0 [ 1047.166536][ T31] audit: type=1800 audit(4294967502.260:33): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2821" name="#1012" dev="tmpfs" ino=1012 res=0 errno=0 [ 1049.850378][T20638] __vm_enough_memory: pid: 20638, comm: syz.8.2828, bytes: 4398046511104 not enough memory for the allocation [ 1052.354219][T20662] netlink: 'syz.6.2833': attribute type 1 has an invalid length. [ 1052.494427][T20662] netlink: 680 bytes leftover after parsing attributes in process `syz.6.2833'. [ 1052.672927][T20659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1052.726205][T20659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1052.763314][T20659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1052.827612][T20659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1052.880158][T20659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.051704][T14241] Bluetooth: hci4: command 0x0c1a tx timeout [ 1054.409546][T20689] No such timeout policy "" [ 1054.426414][T20689] netlink: Failed to associated timeout policy '' [ 1054.767328][T16798] Bluetooth: hci2: command 0x0c1a tx timeout [ 1054.774500][T14241] Bluetooth: hci0: command 0x0c1a tx timeout [ 1054.859792][T14241] Bluetooth: hci1: command 0x0c1a tx timeout [ 1054.929449][T14241] Bluetooth: hci3: command 0x0c1a tx timeout [ 1055.152655][T20693] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1055.838192][T20692] zswap: compressor not available [ 1055.959114][T20710] FAULT_INJECTION: forcing a failure. [ 1055.959114][T20710] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.107859][T20710] CPU: 0 UID: 0 PID: 20710 Comm: syz.8.2846 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1056.107907][T20710] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1056.107918][T20710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1056.107939][T20710] Call Trace: [ 1056.107948][T20710] [ 1056.107958][T20710] dump_stack_lvl+0x16c/0x1f0 [ 1056.108005][T20710] should_fail_ex+0x512/0x640 [ 1056.108033][T20710] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1056.108066][T20710] should_failslab+0xc2/0x120 [ 1056.108105][T20710] kmem_cache_alloc_noprof+0x83/0x770 [ 1056.108132][T20710] ? __pfx_acct_collect+0x10/0x10 [ 1056.108165][T20710] ? taskstats_exit+0x654/0xbe0 [ 1056.108205][T20710] ? taskstats_exit+0x654/0xbe0 [ 1056.108237][T20710] taskstats_exit+0x654/0xbe0 [ 1056.108274][T20710] ? __pfx_taskstats_exit+0x10/0x10 [ 1056.108318][T20710] ? exit_signals+0x388/0xb00 [ 1056.108355][T20710] do_exit+0x5e4/0x2bd0 [ 1056.108384][T20710] ? __pfx_do_exit+0x10/0x10 [ 1056.108406][T20710] ? do_raw_spin_lock+0x12c/0x2b0 [ 1056.108434][T20710] ? find_held_lock+0x2b/0x80 [ 1056.108481][T20710] do_group_exit+0xd3/0x2a0 [ 1056.108511][T20710] get_signal+0x2671/0x26d0 [ 1056.108554][T20710] ? __pfx_get_signal+0x10/0x10 [ 1056.108589][T20710] ? do_futex+0x122/0x350 [ 1056.108624][T20710] arch_do_signal_or_restart+0x8f/0x7a0 [ 1056.108662][T20710] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1056.108704][T20710] ? fput+0x70/0xf0 [ 1056.108728][T20710] ? __pfx___x64_sys_futex+0x10/0x10 [ 1056.108766][T20710] exit_to_user_mode_loop+0x8c/0x540 [ 1056.108802][T20710] do_syscall_64+0x4ee/0xf80 [ 1056.108842][T20710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.108867][T20710] RIP: 0033:0x7f21ff58f7c9 [ 1056.108887][T20710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.108911][T20710] RSP: 002b:00007f220036e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1056.108935][T20710] RAX: fffffffffffffe00 RBX: 00007f21ff7e5fa8 RCX: 00007f21ff58f7c9 [ 1056.108952][T20710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f21ff7e5fa8 [ 1056.108967][T20710] RBP: 00007f21ff7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.108982][T20710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.108997][T20710] R13: 00007f21ff7e6038 R14: 00007ffebdb05e70 R15: 00007ffebdb05f58 [ 1056.109028][T20710] [ 1059.455710][T20750] __vm_enough_memory: pid: 20750, comm: syz.6.2853, bytes: 4398046511104 not enough memory for the allocation [ 1062.823006][T20789] netlink: 'syz.8.2861': attribute type 1 has an invalid length. [ 1062.907431][T20789] netlink: 680 bytes leftover after parsing attributes in process `syz.8.2861'. [ 1063.904323][T20805] random: crng reseeded on system resumption [ 1064.721383][T20805] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2865'. [ 1064.944825][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.956950][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.668731][T20820] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1065.681294][T20821] random: crng reseeded on system resumption [ 1066.100491][ T6387] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:17: bg 3: bad block bitmap checksum [ 1066.211285][ T6387] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1551 with max blocks 1 with error 74 [ 1066.312756][ T6387] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1066.312756][ T6387] [ 1068.495401][T20833] ima: policy update failed [ 1068.566776][ T31] audit: type=1802 audit(4294967523.810:34): pid=20833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2871" res=0 errno=0 [ 1070.708926][T20865] random: crng reseeded on system resumption [ 1070.873891][T20863] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.0.2877: Error -117 reading block bitmap for 3 [ 1071.180488][T20865] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1074.274369][T20894] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2883'. [ 1074.420293][T20894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2883'. [ 1074.603681][T20894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.724720][T20894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.922368][T20894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.952299][T20894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.362236][T20909] Invalid ELF header magic: != ELF [ 1076.729460][T20928] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1081.777379][ T31] audit: type=1800 audit(4294967537.010:35): pid=20985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2899" name="dbroot" dev="configfs" ino=89006 res=0 errno=0 [ 1088.074211][T21040] FAULT_INJECTION: forcing a failure. [ 1088.074211][T21040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1088.198172][T21040] CPU: 0 UID: 0 PID: 21040 Comm: syz.6.2908 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1088.198218][T21040] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1088.198233][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.198249][T21040] Call Trace: [ 1088.198256][T21040] [ 1088.198265][T21040] dump_stack_lvl+0x16c/0x1f0 [ 1088.198316][T21040] should_fail_ex+0x512/0x640 [ 1088.198349][T21040] should_fail_alloc_page+0xe7/0x130 [ 1088.198390][T21040] prepare_alloc_pages+0x401/0x670 [ 1088.198434][T21040] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1088.198466][T21040] ? lock_acquire+0x179/0x330 [ 1088.198490][T21040] ? find_held_lock+0x2b/0x80 [ 1088.198523][T21040] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1088.198559][T21040] ? rcu_is_watching+0x12/0xc0 [ 1088.198592][T21040] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1088.198625][T21040] ? lockdep_hardirqs_on+0x7c/0x110 [ 1088.198663][T21040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1088.198696][T21040] ? trace_sched_exit_tp+0xd1/0x110 [ 1088.198775][T21040] ? __schedule+0x10b9/0x6150 [ 1088.198812][T21040] ? __lock_acquire+0x436/0x2890 [ 1088.198847][T21040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1088.198886][T21040] ? policy_nodemask+0xea/0x4e0 [ 1088.198925][T21040] alloc_pages_mpol+0x1fb/0x550 [ 1088.198969][T21040] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1088.199014][T21040] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1088.199040][T21040] vma_alloc_folio_noprof+0xed/0x1e0 [ 1088.199064][T21040] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1088.199098][T21040] do_anonymous_page+0xc81/0x2190 [ 1088.199134][T21040] __handle_mm_fault+0x1ecf/0x2bb0 [ 1088.199164][T21040] ? reacquire_held_locks+0xcd/0x1f0 [ 1088.199187][T21040] ? __pfx___handle_mm_fault+0x10/0x10 [ 1088.199217][T21040] ? lock_vma_under_rcu+0x176/0x580 [ 1088.199261][T21040] handle_mm_fault+0x3fe/0xad0 [ 1088.199291][T21040] do_user_addr_fault+0x60c/0x1370 [ 1088.199324][T21040] ? rcu_is_watching+0x12/0xc0 [ 1088.199361][T21040] exc_page_fault+0x64/0xc0 [ 1088.199397][T21040] asm_exc_page_fault+0x26/0x30 [ 1088.199421][T21040] RIP: 0033:0x7fc67ce5a65b [ 1088.199440][T21040] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1088.199463][T21040] RSP: 002b:00007fc67dd79fb0 EFLAGS: 00010202 [ 1088.199483][T21040] RAX: 0000000000000000 RBX: 00007fc67d1e5fa0 RCX: 0000000000000000 [ 1088.199498][T21040] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000100 [ 1088.199513][T21040] RBP: 00007fc67d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1088.199528][T21040] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000000 [ 1088.199543][T21040] R13: 00007fc67d1e6038 R14: 00007fc67d1e5fa0 R15: 00007fff15b6e518 [ 1088.199574][T21040] [ 1088.589808][T21040] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1088.841819][T21050] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 1092.038024][T21081] FAULT_INJECTION: forcing a failure. [ 1092.038024][T21081] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.141378][T21081] CPU: 0 UID: 0 PID: 21081 Comm: syz.6.2915 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1092.141424][T21081] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1092.141436][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1092.141451][T21081] Call Trace: [ 1092.141460][T21081] [ 1092.141470][T21081] dump_stack_lvl+0x16c/0x1f0 [ 1092.141512][T21081] should_fail_ex+0x512/0x640 [ 1092.141541][T21081] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1092.141575][T21081] should_failslab+0xc2/0x120 [ 1092.141615][T21081] kmem_cache_alloc_noprof+0x83/0x770 [ 1092.141645][T21081] ? getname_kernel+0x52/0x370 [ 1092.141675][T21081] ? getname_kernel+0x52/0x370 [ 1092.141697][T21081] getname_kernel+0x52/0x370 [ 1092.141721][T21081] kern_path+0x1d/0x50 [ 1092.141755][T21081] lookup_bdev+0xd8/0x280 [ 1092.141778][T21081] ? __pfx_lookup_bdev+0x10/0x10 [ 1092.141812][T21081] ? _copy_from_user+0x59/0xd0 [ 1092.141846][T21081] btrfs_control_ioctl+0x162/0x3b0 [ 1092.141870][T21081] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1092.141898][T21081] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1092.141924][T21081] __x64_sys_ioctl+0x18e/0x210 [ 1092.141956][T21081] do_syscall_64+0xcd/0xf80 [ 1092.141997][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.142023][T21081] RIP: 0033:0x7fc67cf8f7c9 [ 1092.142043][T21081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.142068][T21081] RSP: 002b:00007fc67dd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.142092][T21081] RAX: ffffffffffffffda RBX: 00007fc67d1e5fa0 RCX: 00007fc67cf8f7c9 [ 1092.142109][T21081] RDX: 0000200000000040 RSI: 0000000050009405 RDI: 0000000000000005 [ 1092.142125][T21081] RBP: 00007fc67d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1092.142143][T21081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.142158][T21081] R13: 00007fc67d1e6038 R14: 00007fc67d1e5fa0 R15: 00007fff15b6e518 [ 1092.142189][T21081] [ 1093.080977][ T31] audit: type=1326 audit(4294967548.250:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21089 comm="syz.6.2918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc67cf8f7c9 code=0x0 [ 1093.502293][T21097] FAULT_INJECTION: forcing a failure. [ 1093.502293][T21097] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.584125][T21097] CPU: 0 UID: 0 PID: 21097 Comm: syz.3.2919 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1093.584175][T21097] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1093.584188][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.584205][T21097] Call Trace: [ 1093.584213][T21097] [ 1093.584223][T21097] dump_stack_lvl+0x16c/0x1f0 [ 1093.584268][T21097] should_fail_ex+0x512/0x640 [ 1093.584298][T21097] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1093.584335][T21097] should_failslab+0xc2/0x120 [ 1093.584378][T21097] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1093.584420][T21097] ? shmem_alloc_inode+0x25/0x50 [ 1093.584462][T21097] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1093.584497][T21097] ? shmem_alloc_inode+0x25/0x50 [ 1093.584532][T21097] shmem_alloc_inode+0x25/0x50 [ 1093.584575][T21097] alloc_inode+0x64/0x240 [ 1093.584606][T21097] new_inode+0x22/0x1c0 [ 1093.584638][T21097] shmem_get_inode+0x19a/0xfb0 [ 1093.584691][T21097] shmem_mknod+0x1a2/0x3b0 [ 1093.584736][T21097] vfs_mknod+0x6f3/0xac0 [ 1093.584774][T21097] do_mknodat+0x36a/0x6f0 [ 1093.584813][T21097] ? __pfx_do_mknodat+0x10/0x10 [ 1093.584851][T21097] ? getname_flags.part.0+0x1c5/0x550 [ 1093.584892][T21097] __x64_sys_mknod+0x87/0xb0 [ 1093.584934][T21097] do_syscall_64+0xcd/0xf80 [ 1093.584977][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.585004][T21097] RIP: 0033:0x7fed5ed8f7c9 [ 1093.585031][T21097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.585057][T21097] RSP: 002b:00007fed5fc7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1093.585081][T21097] RAX: ffffffffffffffda RBX: 00007fed5efe5fa0 RCX: 00007fed5ed8f7c9 [ 1093.585099][T21097] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1093.585116][T21097] RBP: 00007fed5ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1093.585132][T21097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.585150][T21097] R13: 00007fed5efe6038 R14: 00007fed5efe5fa0 R15: 00007fffbc0f5608 [ 1093.585184][T21097] [ 1094.912088][T21097] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1096.706290][T19732] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:14: bg 4: bad block bitmap checksum [ 1097.028323][T19732] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1568 with max blocks 4 with error 74 [ 1097.183086][T19732] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1097.183086][T19732] [ 1099.613824][T21002] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1099.740927][T21002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1099.740927][T21002] [ 1099.892397][T21002] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1573 with max blocks 1 with error 117 [ 1100.005612][T21002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.005612][T21002] [ 1100.118816][T21002] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1577 with max blocks 1 with error 117 [ 1100.207644][T21002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.207644][T21002] [ 1100.297110][T21002] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1579 with max blocks 1 with error 117 [ 1100.404816][T21002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.404816][T21002] [ 1103.944446][T21182] nbd: illegal input index 37139 [ 1104.650574][T21193] random: crng reseeded on system resumption [ 1105.008138][T14241] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1108.181850][T21223] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1108.269227][T21223] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1110.739633][T21244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1113.899116][T21271] Invalid ELF header magic: != ELF [ 1114.666426][T21271] zswap: compressor not available [ 1118.184940][T21319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2960'. [ 1119.285435][T21319] team0: Port device team_slave_0 removed [ 1121.127409][T21338] input: jHǸ-9%v as /devices/virtual/input/input35 [ 1121.304268][T21349] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1121.412989][T21350] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1121.526233][T21349] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1121.625218][T21349] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1121.625218][T21349] [ 1121.788051][T21358] block nbd7: not configured, cannot reconfigure [ 1124.843404][T21378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1124.903717][T21378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1124.931315][T21378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1124.987912][T21378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1125.020152][T21378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1125.061456][T21378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1125.851955][ T31] audit: type=1800 audit(4294967581.050:37): pid=21393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2973" name="dbroot" dev="configfs" ino=91419 res=0 errno=0 [ 1125.873184][T21377] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1126.376357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.383216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.697310][T14241] Bluetooth: hci4: command 0x0c1a tx timeout [ 1126.927277][T14241] Bluetooth: hci2: command 0x0c1a tx timeout [ 1127.011856][T16798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.020017][T14241] Bluetooth: hci1: command 0x0c1a tx timeout [ 1127.087355][T16798] Bluetooth: hci3: command 0x0c1a tx timeout [ 1127.701156][ T31] audit: type=1804 audit(4294967582.950:38): pid=21406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2977" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=17 res=1 errno=0 [ 1127.846144][ T31] audit: type=1804 audit(4294967583.040:39): pid=21400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2976" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=17 res=1 errno=0 [ 1128.560981][T21415] misc userio: No port type given on /dev/userio [ 1129.167496][T16798] Bluetooth: hci3: command 0x0c1a tx timeout [ 1130.816755][ T8421] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1581 with max blocks 1 with error 117 [ 1130.927918][ T8421] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1130.927918][ T8421] [ 1131.573409][T21456] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1584 with max blocks 1 with error 117 [ 1131.738297][T21448] vivid-007: ================= START STATUS ================= [ 1131.746559][T21448] vivid-007: Generate PTS: true [ 1131.849935][T21456] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1131.849935][T21456] [ 1132.017310][T21448] vivid-007: Generate SCR: true [ 1132.064572][T21458] ICMPv6: process `syz.6.2985' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_batadv.base_reachable_time - use net.ipv6.neigh.veth0_to_batadv.base_reachable_time_ms instead [ 1132.297452][T21448] tpg source WxH: 320x240 (Y'CbCr) [ 1132.458712][T21448] tpg field: 1 [ 1132.462672][T21448] tpg crop: (0,0)/320x240 [ 1132.628689][T21448] tpg compose: (0,0)/320x240 [ 1132.856791][T21448] tpg colorspace: 8 [ 1132.914442][T21448] tpg transfer function: 0/0 [ 1132.942466][T21461] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1133.052446][T21448] tpg Y'CbCr encoding: 0/0 [ 1133.105734][T21448] tpg quantization: 0/0 [ 1133.236832][T21448] tpg RGB range: 0/2 [ 1133.347751][T21448] vivid-007: ================== END STATUS ================== [ 1133.508932][T21469] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1588 with max blocks 1 with error 117 [ 1133.670365][T21461] PCI: Can't parse resource_alignment parameter: B [ 1133.797283][T21469] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1133.797283][T21469] [ 1140.024987][T21519] random: crng reseeded on system resumption [ 1141.431933][T21531] ptrace attach of "./syz-executor exec"[18473] was attempted by ""[21531] [ 1144.218627][T21544] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1144.307490][T21544] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1144.307490][T21544] [ 1147.053210][T21170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1147.066713][T21170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1147.077403][T21170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1147.086253][T21170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1147.097327][T21170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1148.527496][T16798] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1149.169012][T16798] Bluetooth: hci6: command tx timeout [ 1151.249298][T16798] Bluetooth: hci6: command tx timeout [ 1151.528998][T21575] chnl_net:caif_netlink_parms(): no params data found [ 1152.841671][T21609] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1153.286336][T21575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.325487][T21575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.334822][T16798] Bluetooth: hci6: command tx timeout [ 1153.378587][T21575] bridge_slave_0: entered allmulticast mode [ 1153.428167][T21575] bridge_slave_0: entered promiscuous mode [ 1153.491373][T21575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.554331][T21575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.593186][T21575] bridge_slave_1: entered allmulticast mode [ 1153.628811][T21575] bridge_slave_1: entered promiscuous mode [ 1153.850805][T21575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.962323][T21575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.211319][T21575] team0: Port device team_slave_0 added [ 1154.362162][T21575] team0: Port device team_slave_1 added [ 1154.450448][T21617] ubi0: attaching mtd1 [ 1154.454614][T21617] ubi0 error: ubi_attach_mtd_dev: bad VID header (16777279) or data offsets (16777343) [ 1154.551153][T21616] ubi0: attaching mtd1 [ 1154.560868][T21575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.589174][T21616] ubi0 error: ubi_attach_mtd_dev: bad VID header (16777279) or data offsets (16777343) [ 1154.643622][T21575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.857249][T21575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.950530][T21575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.002485][T21626] FAULT_INJECTION: forcing a failure. [ 1155.002485][T21626] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.017067][T21575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.114178][T21626] CPU: 0 UID: 0 PID: 21626 Comm: syz.6.3016 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1155.114224][T21626] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1155.114235][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1155.114250][T21626] Call Trace: [ 1155.114260][T21626] [ 1155.114270][T21626] dump_stack_lvl+0x16c/0x1f0 [ 1155.114336][T21626] should_fail_ex+0x512/0x640 [ 1155.114364][T21626] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1155.114399][T21626] should_failslab+0xc2/0x120 [ 1155.114447][T21626] kmem_cache_alloc_noprof+0x83/0x770 [ 1155.114476][T21626] ? stack_depot_save_flags+0x29/0x9b0 [ 1155.114504][T21626] ? alloc_empty_file+0x55/0x1e0 [ 1155.114535][T21626] ? alloc_empty_file+0x55/0x1e0 [ 1155.114572][T21626] ? kasan_save_track+0x14/0x30 [ 1155.114604][T21626] alloc_empty_file+0x55/0x1e0 [ 1155.114632][T21626] path_openat+0xde/0x3140 [ 1155.114667][T21626] ? do_syscall_64+0xcd/0xf80 [ 1155.114703][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.114737][T21626] ? __pfx_path_openat+0x10/0x10 [ 1155.114779][T21626] ? __lock_acquire+0x436/0x2890 [ 1155.114807][T21626] do_filp_open+0x20b/0x470 [ 1155.114845][T21626] ? __pfx_do_filp_open+0x10/0x10 [ 1155.114903][T21626] ? _raw_spin_unlock+0x28/0x50 [ 1155.114936][T21626] ? alloc_fd+0x471/0x7d0 [ 1155.114981][T21626] do_sys_openat2+0x121/0x290 [ 1155.115008][T21626] ? __pfx_do_sys_openat2+0x10/0x10 [ 1155.115048][T21626] __x64_sys_open+0x153/0x1e0 [ 1155.115076][T21626] ? __pfx___x64_sys_open+0x10/0x10 [ 1155.115111][T21626] ? rcu_is_watching+0x12/0xc0 [ 1155.115149][T21626] do_syscall_64+0xcd/0xf80 [ 1155.115191][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.115215][T21626] RIP: 0033:0x7fc67cf8f7c9 [ 1155.115235][T21626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.115260][T21626] RSP: 002b:00007fc67dd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1155.115284][T21626] RAX: ffffffffffffffda RBX: 00007fc67d1e5fa0 RCX: 00007fc67cf8f7c9 [ 1155.115478][T21626] RDX: 0000000000000147 RSI: 0000000000022240 RDI: 0000200000000800 [ 1155.115528][T21626] RBP: 00007fc67d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1155.115544][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.115559][T21626] R13: 00007fc67d1e6038 R14: 00007fc67d1e5fa0 R15: 00007fff15b6e518 [ 1155.115595][T21626] [ 1155.642746][T21575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.789677][T16798] Bluetooth: hci6: command tx timeout [ 1155.861376][T21633] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1155.905727][T21575] hsr_slave_0: entered promiscuous mode [ 1155.960128][T21575] hsr_slave_1: entered promiscuous mode [ 1156.008073][T21575] debugfs: 'hsr0' already exists in 'hsr' [ 1156.014048][T21575] Cannot create hsr debugfs directory [ 1156.106774][T21633] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1156.106774][T21633] [ 1157.759902][T21575] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1157.941741][T21575] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1158.209268][T21575] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1158.340923][T21575] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1159.062601][T21575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.209257][T21575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.300575][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.309004][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.530503][T19734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.537795][T19734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.247874][T21575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.416339][T21006] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1591 with max blocks 1 with error 117 [ 1161.562581][T21006] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1161.562581][T21006] [ 1163.321908][T21699] netlink: 218 bytes leftover after parsing attributes in process `syz.3.3028'. [ 1163.438003][T21699] netlink: 218 bytes leftover after parsing attributes in process `syz.3.3028'. [ 1163.638926][T21575] veth0_vlan: entered promiscuous mode [ 1163.983252][T21575] veth1_vlan: entered promiscuous mode [ 1164.136837][T21701] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1164.338384][T21701] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1164.338384][T21701] [ 1164.525097][T21575] veth0_macvtap: entered promiscuous mode [ 1164.610471][T21575] veth1_macvtap: entered promiscuous mode [ 1164.841394][T21575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.049043][T21575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.314619][T21719] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.3030: Error -117 reading block bitmap for 4 [ 1165.474411][ T7981] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.577890][ T7981] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.672154][ T7981] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.741808][ T7981] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.390760][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.474048][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.620030][T21726] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.3030: bg 5: bad block bitmap checksum [ 1166.721815][T19714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.786953][T19714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.007457][T21726] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1167.238506][T21726] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1167.238506][T21726] [ 1172.380924][T21803] phram: not enough arguments [ 1174.590795][ T33] oom_reaper: reaped process 21743 (syz.8.3033), now anon-rss:0kB, file-rss:25164kB, shmem-rss:0kB [ 1175.390824][T21838] input: jJǸ-9%vJ86 as /devices/virtual/input/input38 [ 1175.758766][T21838] usb usb24: usbfs: process 21838 (syz.8.3046) did not claim interface 0 before use [ 1176.545250][T21854] input: jJǸ-9%vJ86 as /devices/virtual/input/input39 [ 1176.649373][T21858] phram: not enough arguments [ 1177.307940][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1177.338784][T21859] Invalid ELF header magic: != ELF [ 1179.433270][T21876] FAULT_INJECTION: forcing a failure. [ 1179.433270][T21876] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.596116][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.9.3063 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1179.596164][T21876] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1179.596175][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1179.596191][T21876] Call Trace: [ 1179.596200][T21876] [ 1179.596209][T21876] dump_stack_lvl+0x16c/0x1f0 [ 1179.596256][T21876] should_fail_ex+0x512/0x640 [ 1179.596283][T21876] ? fs_reclaim_acquire+0xae/0x150 [ 1179.596325][T21876] should_failslab+0xc2/0x120 [ 1179.596363][T21876] kmem_cache_alloc_noprof+0x83/0x770 [ 1179.596393][T21876] ? __pfx_map_id_range_down+0x10/0x10 [ 1179.596428][T21876] ? security_inode_alloc+0x3b/0x2b0 [ 1179.596460][T21876] ? security_inode_alloc+0x3b/0x2b0 [ 1179.596484][T21876] security_inode_alloc+0x3b/0x2b0 [ 1179.596512][T21876] inode_init_always_gfp+0xced/0x1040 [ 1179.596554][T21876] alloc_inode+0x86/0x240 [ 1179.596582][T21876] new_inode+0x22/0x1c0 [ 1179.596612][T21876] hugetlbfs_get_inode+0x354/0x700 [ 1179.596635][T21876] ? security_capable+0x7e/0x260 [ 1179.596678][T21876] hugetlb_file_setup+0x38d/0x620 [ 1179.596707][T21876] newseg+0xa74/0xe60 [ 1179.596744][T21876] ? __pfx_newseg+0x10/0x10 [ 1179.596779][T21876] ? ksys_write+0x190/0x250 [ 1179.596817][T21876] ipcget+0xf6/0xfa0 [ 1179.596850][T21876] ? do_futex+0x122/0x350 [ 1179.596880][T21876] ? __pfx_do_futex+0x10/0x10 [ 1179.596913][T21876] ? __pfx_ipcget+0x10/0x10 [ 1179.596948][T21876] ? __x64_sys_futex+0x1e0/0x4c0 [ 1179.596975][T21876] ? __x64_sys_futex+0x1e9/0x4c0 [ 1179.597008][T21876] __x64_sys_shmget+0x13b/0x1b0 [ 1179.597042][T21876] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1179.597081][T21876] ? rcu_is_watching+0x12/0xc0 [ 1179.597126][T21876] do_syscall_64+0xcd/0xf80 [ 1179.597167][T21876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.597192][T21876] RIP: 0033:0x7f615eb8f7c9 [ 1179.597217][T21876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.597242][T21876] RSP: 002b:00007f615fa4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1179.597266][T21876] RAX: ffffffffffffffda RBX: 00007f615ede5fa0 RCX: 00007f615eb8f7c9 [ 1179.597283][T21876] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1179.597299][T21876] RBP: 00007f615ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1179.597314][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.597330][T21876] R13: 00007f615ede6038 R14: 00007f615ede5fa0 R15: 00007ffe3d4d47a8 [ 1179.597362][T21876] [ 1182.073802][T21904] netlink: 'syz.3.3059': attribute type 2 has an invalid length. [ 1182.501126][T21911] input: jJǸ-9%vJ86 as /devices/virtual/input/input40 [ 1182.752025][T21911] usb usb24: usbfs: process 21911 (syz.6.3061) did not claim interface 0 before use [ 1184.078218][T21932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3068'. [ 1184.588585][T21941] netlink: 21 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1184.618728][T21936] futex_wake_op: syz.3.3069 tries to shift op by -2048; fix this program [ 1184.677720][T21936] futex_wake_op: syz.3.3069 tries to shift op by -2048; fix this program [ 1184.743711][T21937] 0x000000000001-0x000000020000 : "" [ 1185.028905][T21937] ftl_cs: FTL header corrupt! [ 1185.488114][T16798] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1186.674048][T21954] input: jJǸ-9%vJ86 as /devices/virtual/input/input41 [ 1186.937654][ T6622] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1595 with max blocks 1 with error 117 [ 1187.067435][ T6622] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1187.067435][ T6622] [ 1187.493950][T21968] HfR: entered promiscuous mode [ 1187.547361][T21968] GUP no longer grows the stack in syz.6.3074 (21968): 14000-18000 (4000) [ 1187.547511][T21968] CPU: 0 UID: 0 PID: 21968 Comm: syz.6.3074 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1187.547559][T21968] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1187.547570][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1187.547585][T21968] Call Trace: [ 1187.547593][T21968] [ 1187.547603][T21968] dump_stack_lvl+0x16c/0x1f0 [ 1187.547643][T21968] gup_vma_lookup+0x1d2/0x220 [ 1187.547680][T21968] __get_user_pages+0x241/0x3590 [ 1187.547728][T21968] ? find_held_lock+0x2b/0x80 [ 1187.547762][T21968] ? __pfx___get_user_pages+0x10/0x10 [ 1187.547806][T21968] get_user_pages_remote+0x243/0xab0 [ 1187.547849][T21968] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1187.547887][T21968] ? __pfx___might_resched+0x10/0x10 [ 1187.547922][T21968] ? noop_dirty_folio+0x5e/0xb0 [ 1187.547957][T21968] __access_remote_vm+0x24d/0x850 [ 1187.547998][T21968] ? __pfx___access_remote_vm+0x10/0x10 [ 1187.548039][T21968] mem_rw+0x20e/0x640 [ 1187.548084][T21968] ? __pfx_mem_write+0x10/0x10 [ 1187.548118][T21968] vfs_write+0x2a0/0x11d0 [ 1187.548154][T21968] ? __pfx___mutex_lock+0x10/0x10 [ 1187.548195][T21968] ? __pfx_vfs_write+0x10/0x10 [ 1187.548237][T21968] ? __fget_files+0x20e/0x3c0 [ 1187.548279][T21968] ksys_write+0x12a/0x250 [ 1187.548313][T21968] ? __pfx_ksys_write+0x10/0x10 [ 1187.548355][T21968] do_syscall_64+0xcd/0xf80 [ 1187.548393][T21968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.548418][T21968] RIP: 0033:0x7fc67cf8f7c9 [ 1187.548437][T21968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.548460][T21968] RSP: 002b:00007fc67dd7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.548483][T21968] RAX: ffffffffffffffda RBX: 00007fc67d1e5fa0 RCX: 00007fc67cf8f7c9 [ 1187.548499][T21968] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1187.548514][T21968] RBP: 00007fc67d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1187.548530][T21968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.548550][T21968] R13: 00007fc67d1e6038 R14: 00007fc67d1e5fa0 R15: 00007fff15b6e518 [ 1187.548582][T21968] [ 1187.653148][T21970] openvswitch: HfR: Dropping previously announced user features [ 1187.770598][T21962] Invalid ELF header magic: != ELF [ 1187.823585][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.823678][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.398131][ T7978] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1598 with max blocks 1 with error 117 [ 1192.513917][ T7978] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1192.513917][ T7978] [ 1192.970248][T22015] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1193.251168][T22007] tipc: can't start tipc receive workqueue [ 1193.373524][T22015] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1193.373524][T22015] [ 1197.948153][T22046] futex_wake_op: syz.3.3088 tries to shift op by -2048; fix this program [ 1197.956832][T22046] futex_wake_op: syz.3.3088 tries to shift op by -2048; fix this program [ 1198.149337][T22049] 0x000000000001-0x000000020000 : "" [ 1198.359087][T22049] ftl_cs: FTL header corrupt! [ 1200.580338][T22071] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1200.645175][T22073] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1205.193632][T22099] __vm_enough_memory: pid: 22099, comm: syz.3.3099, bytes: 4398046511104 not enough memory for the allocation [ 1206.735042][ T7981] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1364 with max blocks 5 with error 117 [ 1206.833176][ T7981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1206.833176][ T7981] [ 1206.929032][ T7981] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1207.051476][ T7981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1207.051476][ T7981] [ 1207.170919][ T7981] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 8 with max blocks 18 with error 117 [ 1207.299321][ T7981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1207.299321][ T7981] [ 1207.399361][ T7981] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1605 with max blocks 2 with error 117 [ 1207.539069][ T7981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1207.539069][ T7981] [ 1207.604482][ T7981] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1613 with max blocks 2 with error 117 [ 1207.754355][ T7981] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1207.754355][ T7981] [ 1209.820456][T22142] ima: policy update failed [ 1209.847205][ T31] audit: type=1802 audit(4294967665.070:40): pid=22142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3108" res=0 errno=0 [ 1211.022420][T22159] __vm_enough_memory: pid: 22159, comm: syz.6.3113, bytes: 4398046511104 not enough memory for the allocation [ 1212.202885][T22178] EXT4-fs: 4 callbacks suppressed [ 1212.202911][T22178] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1212.320226][T22178] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1212.320226][T22178] [ 1212.564249][T22182] FAULT_INJECTION: forcing a failure. [ 1212.564249][T22182] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.644381][T22182] CPU: 0 UID: 0 PID: 22182 Comm: syz.9.3118 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1212.644427][T22182] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1212.644439][T22182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.644455][T22182] Call Trace: [ 1212.644463][T22182] [ 1212.644473][T22182] dump_stack_lvl+0x16c/0x1f0 [ 1212.644521][T22182] should_fail_ex+0x512/0x640 [ 1212.644549][T22182] ? fs_reclaim_acquire+0xae/0x150 [ 1212.644592][T22182] should_failslab+0xc2/0x120 [ 1212.644632][T22182] __kmalloc_noprof+0xeb/0x910 [ 1212.644660][T22182] ? tomoyo_encode2+0x100/0x3e0 [ 1212.644699][T22182] ? tomoyo_encode2+0x100/0x3e0 [ 1212.644732][T22182] tomoyo_encode2+0x100/0x3e0 [ 1212.644770][T22182] tomoyo_encode+0x29/0x50 [ 1212.644802][T22182] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1212.644852][T22182] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1212.644884][T22182] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1212.644943][T22182] ? do_raw_spin_lock+0x12c/0x2b0 [ 1212.644980][T22182] tomoyo_file_open+0x6b/0x90 [ 1212.645021][T22182] security_file_open+0x84/0x1e0 [ 1212.645055][T22182] do_dentry_open+0x597/0x1590 [ 1212.645095][T22182] ? security_inode_permission+0xbf/0x260 [ 1212.645129][T22182] vfs_open+0x82/0x3f0 [ 1212.645159][T22182] path_openat+0x2078/0x3140 [ 1212.645206][T22182] ? __pfx_path_openat+0x10/0x10 [ 1212.645254][T22182] do_filp_open+0x20b/0x470 [ 1212.645293][T22182] ? __pfx_do_filp_open+0x10/0x10 [ 1212.645352][T22182] ? alloc_fd+0x471/0x7d0 [ 1212.645401][T22182] do_sys_openat2+0x121/0x290 [ 1212.645428][T22182] ? __pfx_do_sys_openat2+0x10/0x10 [ 1212.645458][T22182] ? __sys_sendmsg+0x18c/0x220 [ 1212.645496][T22182] __x64_sys_openat+0x174/0x210 [ 1212.645531][T22182] ? __pfx___x64_sys_openat+0x10/0x10 [ 1212.645571][T22182] do_syscall_64+0xcd/0xf80 [ 1212.645611][T22182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.645637][T22182] RIP: 0033:0x7f615eb8f7c9 [ 1212.645657][T22182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.645683][T22182] RSP: 002b:00007f615fa2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1212.645708][T22182] RAX: ffffffffffffffda RBX: 00007f615ede6090 RCX: 00007f615eb8f7c9 [ 1212.645725][T22182] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1212.645742][T22182] RBP: 00007f615ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1212.645758][T22182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.645773][T22182] R13: 00007f615ede6128 R14: 00007f615ede6090 R15: 00007ffe3d4d47a8 [ 1212.645805][T22182] [ 1213.198665][T22177] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1213.235501][T22182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1214.111188][T22194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3122'. [ 1215.351207][T22197] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1215.423895][T22200] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x78003 [ 1215.591814][T22197] can0: slcan on pty233. [ 1215.669723][T22200] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1215.760484][T22200] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1215.840078][T22200] raw: ffffffff00000000 ffff888097c07400 00000001ffffffff 0000000000000000 [ 1215.884629][T22200] page dumped because: unmovable page [ 1215.891197][ T797] usb usb38-port5: attempt power cycle [ 1216.007599][T22196] can0 (unregistered): slcan off pty233. [ 1216.037562][T22200] page_owner tracks the page as allocated [ 1216.106029][T22200] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 19330, tgid 19326 (syz.6.2592), ts 963079714897, free_ts 959329488710 [ 1216.268964][T22200] post_alloc_hook+0x1af/0x220 [ 1216.308943][T22200] get_page_from_freelist+0xd0b/0x31a0 [ 1216.348706][T22200] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1216.388083][T22200] alloc_pages_mpol+0x1fb/0x550 [ 1216.405277][T22200] alloc_pages_noprof+0x131/0x390 [ 1216.438187][T22200] relay_open_buf.part.0+0x262/0xc40 [ 1216.478766][T22200] relay_open+0x653/0xad0 [ 1216.488323][ T797] usb usb38-port5: unable to enumerate USB device [ 1216.517346][T22200] blk_trace_setup_prepare+0x38e/0x700 [ 1216.522880][T22200] blk_trace_setup+0x1c5/0x3b0 [ 1216.587236][T22200] blk_trace_ioctl+0x2ce/0x300 [ 1216.644461][T22200] blkdev_ioctl+0x1fa/0x6e0 [ 1216.670760][T22200] __x64_sys_ioctl+0x18e/0x210 [ 1216.752997][T22200] do_syscall_64+0xcd/0xf80 [ 1216.763122][T22200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.827281][T22200] page last free pid 8424 tgid 8424 stack trace: [ 1216.884205][T22200] __free_frozen_pages+0x7df/0x1170 [ 1216.917308][T22200] rcu_core+0x79c/0x15f0 [ 1216.937239][T22200] handle_softirqs+0x219/0x950 [ 1216.942085][T22200] do_softirq+0xb2/0xf0 [ 1217.008159][T22200] __local_bh_enable_ip+0x100/0x120 [ 1217.013452][T22200] __alloc_skb+0x381/0x410 [ 1217.072008][T22226] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3127'. [ 1217.088503][T22200] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1217.137253][T22200] process_one_work+0x9ba/0x1b20 [ 1217.169371][T22200] worker_thread+0x6c8/0xf10 [ 1217.174055][T22200] kthread+0x3c5/0x780 [ 1217.239679][T22200] ret_from_fork+0x983/0xb10 [ 1217.275655][T22200] ret_from_fork_asm+0x1a/0x30 [ 1218.197727][T22241] FAULT_INJECTION: forcing a failure. [ 1218.197727][T22241] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.337974][T22241] CPU: 0 UID: 0 PID: 22241 Comm: syz.9.3130 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1218.338018][T22241] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1218.338035][T22241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1218.338051][T22241] Call Trace: [ 1218.338059][T22241] [ 1218.338069][T22241] dump_stack_lvl+0x16c/0x1f0 [ 1218.338117][T22241] should_fail_ex+0x512/0x640 [ 1218.338150][T22241] should_failslab+0xc2/0x120 [ 1218.338190][T22241] __kmalloc_cache_noprof+0x80/0x800 [ 1218.338219][T22241] ? __task_pid_nr_ns+0x1f5/0x500 [ 1218.338241][T22241] ? proc_thread_self_get_link+0x1c6/0x240 [ 1218.338277][T22241] ? proc_thread_self_get_link+0x1c6/0x240 [ 1218.338307][T22241] proc_thread_self_get_link+0x1c6/0x240 [ 1218.338340][T22241] pick_link+0xb09/0x13b0 [ 1218.338371][T22241] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1218.338411][T22241] step_into_slowpath+0x6c6/0xf50 [ 1218.338449][T22241] ? __pfx_step_into_slowpath+0x10/0x10 [ 1218.338487][T22241] ? lookup_fast+0x156/0x610 [ 1218.338516][T22241] ? inode_permission+0x37b/0x640 [ 1218.338548][T22241] link_path_walk+0xd26/0x1c70 [ 1218.338592][T22241] path_openat+0x1bd/0x3140 [ 1218.338627][T22241] ? do_syscall_64+0xcd/0xf80 [ 1218.338664][T22241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.338698][T22241] ? __pfx_path_openat+0x10/0x10 [ 1218.338747][T22241] do_filp_open+0x20b/0x470 [ 1218.338786][T22241] ? __pfx_do_filp_open+0x10/0x10 [ 1218.338846][T22241] ? alloc_fd+0x471/0x7d0 [ 1218.338893][T22241] do_sys_openat2+0x121/0x290 [ 1218.338921][T22241] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.338959][T22241] __x64_sys_openat+0x174/0x210 [ 1218.338987][T22241] ? __pfx___x64_sys_openat+0x10/0x10 [ 1218.339034][T22241] do_syscall_64+0xcd/0xf80 [ 1218.339074][T22241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.339099][T22241] RIP: 0033:0x7f615eb8f7c9 [ 1218.339119][T22241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.339144][T22241] RSP: 002b:00007f615fa4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1218.339168][T22241] RAX: ffffffffffffffda RBX: 00007f615ede5fa0 RCX: 00007f615eb8f7c9 [ 1218.339184][T22241] RDX: 0000000000000300 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1218.339201][T22241] RBP: 00007f615ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1218.339217][T22241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.339232][T22241] R13: 00007f615ede6038 R14: 00007f615ede5fa0 R15: 00007ffe3d4d47a8 [ 1218.339265][T22241] [ 1218.938415][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1218.988520][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1218.988520][T22241] [ 1219.408556][T22253] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1629 with max blocks 1 with error 117 [ 1219.498958][T22253] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1219.498958][T22253] [ 1220.188949][T22266] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 1222.636968][T22295] random: crng reseeded on system resumption [ 1224.645437][T16798] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1225.745650][T22321] zswap: compressor W;0?u=8}L(Eֹjj8+xpȜNkRuoo [ 1233.948572][T22373] dump_stack_lvl+0x16c/0x1f0 [ 1233.948613][T22373] should_fail_ex+0x512/0x640 [ 1233.948641][T22373] ? __kmalloc_noprof+0xca/0x910 [ 1233.948671][T22373] should_failslab+0xc2/0x120 [ 1233.948719][T22373] __kmalloc_noprof+0xeb/0x910 [ 1233.948746][T22373] ? __netlink_kernel_create+0x17f/0x750 [ 1233.948787][T22373] ? __netlink_kernel_create+0x17f/0x750 [ 1233.948822][T22373] __netlink_kernel_create+0x17f/0x750 [ 1233.948860][T22373] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1233.948904][T22373] ? __pfx_genl_pernet_init+0x10/0x10 [ 1233.948944][T22373] genl_pernet_init+0xbd/0x170 [ 1233.948983][T22373] ? __pfx_genl_pernet_init+0x10/0x10 [ 1233.949023][T22373] ? lockdep_init_map_type+0x5c/0x270 [ 1233.949049][T22373] ? __pfx_genl_rcv+0x10/0x10 [ 1233.949085][T22373] ? __pfx_genl_bind+0x10/0x10 [ 1233.949122][T22373] ? __pfx_genl_unbind+0x10/0x10 [ 1233.949158][T22373] ? __pfx_genl_release+0x10/0x10 [ 1233.949181][T22373] ? mutex_init_lockep+0x110/0x150 [ 1233.949210][T22373] ops_init+0x1e2/0x5f0 [ 1233.949246][T22373] setup_net+0x11d/0x3a0 [ 1233.949281][T22373] ? __pfx_setup_net+0x10/0x10 [ 1233.949313][T22373] ? lockdep_init_map_type+0x5c/0x270 [ 1233.949339][T22373] ? mutex_init_lockep+0x110/0x150 [ 1233.949368][T22373] copy_net_ns+0x351/0x7c0 [ 1233.949408][T22373] create_new_namespaces+0x3ea/0xab0 [ 1233.949454][T22373] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1233.949491][T22373] ksys_unshare+0x45b/0xa40 [ 1233.949535][T22373] ? __pfx_ksys_unshare+0x10/0x10 [ 1233.949578][T22373] ? do_user_addr_fault+0x843/0x1370 [ 1233.949614][T22373] __x64_sys_unshare+0x31/0x40 [ 1233.949652][T22373] do_syscall_64+0xcd/0xf80 [ 1233.949700][T22373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.949725][T22373] RIP: 0033:0x7f615eb8f7c9 [ 1233.949744][T22373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.949770][T22373] RSP: 002b:00007f615fa4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1233.949794][T22373] RAX: ffffffffffffffda RBX: 00007f615ede5fa0 RCX: 00007f615eb8f7c9 [ 1233.949811][T22373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1233.949827][T22373] RBP: 00007f615ec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1233.949843][T22373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.949858][T22373] R13: 00007f615ede6038 R14: 00007f615ede5fa0 R15: 00007ffe3d4d47a8 [ 1233.949891][T22373] [ 1235.232586][T21004] bond0: left allmulticast mode [ 1235.313564][T21004] bond_slave_0: left allmulticast mode [ 1235.337289][T21004] bond_slave_1: left allmulticast mode [ 1235.342822][T21004] bond0: left promiscuous mode [ 1235.378040][T21004] bond_slave_0: left promiscuous mode [ 1235.437805][T21004] bond_slave_1: left promiscuous mode [ 1235.445291][T21004] bridge0: port 3(bond0) entered disabled state [ 1235.541648][T16798] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 1235.558574][T21004] bridge_slave_1: left allmulticast mode [ 1235.574463][T21004] bridge_slave_1: left promiscuous mode [ 1235.629745][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.679360][T21170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1235.717913][T21170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1235.744115][T21170] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1235.752925][T21170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1235.760832][T21170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.795711][T21004] bridge_slave_0: left allmulticast mode [ 1235.852254][T21004] bridge_slave_0: left promiscuous mode [ 1235.889705][T21004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.046350][T21004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.076930][T21004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.100724][T21004] bond0 (unregistering): Released all slaves [ 1237.809145][T21170] Bluetooth: hci5: command tx timeout [ 1239.054948][T21004] hsr_slave_0: left promiscuous mode [ 1239.121701][T21004] hsr_slave_1: left promiscuous mode [ 1239.155054][T21004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.209871][T21004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.284811][T21004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.312599][T21004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.418613][T21004] veth1_macvtap: left promiscuous mode [ 1239.447454][T21004] veth0_macvtap: left promiscuous mode [ 1239.484770][T21004] veth1_vlan: left promiscuous mode [ 1239.501978][T21004] veth0_vlan: left promiscuous mode [ 1239.735389][ T8425] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1363 with max blocks 6 with error 117 [ 1239.819485][ T8425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1239.819485][ T8425] [ 1239.873081][ T8425] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1631 with max blocks 1 with error 117 [ 1239.894601][T21170] Bluetooth: hci5: command tx timeout [ 1239.956858][ T8425] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1239.956858][ T8425] [ 1241.549101][T21004] team0 (unregistering): Port device team_slave_1 removed [ 1241.659650][T21004] team0 (unregistering): Port device team_slave_0 removed [ 1241.978685][T21170] Bluetooth: hci5: command tx timeout [ 1243.524725][T22382] chnl_net:caif_netlink_parms(): no params data found [ 1243.994892][T21004] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.048280][T21170] Bluetooth: hci5: command tx timeout [ 1244.386899][T21004] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.036586][T21004] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.379493][T21004] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.801560][T22382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.831304][T22382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.861181][T22382] bridge_slave_0: entered allmulticast mode [ 1245.892777][T22382] bridge_slave_0: entered promiscuous mode [ 1245.911580][T22382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.931261][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3163'. [ 1245.947343][T22382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.963658][T22382] bridge_slave_1: entered allmulticast mode [ 1245.981670][T22382] bridge_slave_1: entered promiscuous mode [ 1246.202041][T22382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.299900][T22382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.478085][T22382] team0: Port device team_slave_0 added [ 1246.514549][T21004] dummy0: left allmulticast mode [ 1246.544067][T21004] dummy0: left promiscuous mode [ 1246.589057][T21004] bridge0: port 3(dummy0) entered disabled state [ 1246.702332][T21004] bridge_slave_1: left allmulticast mode [ 1246.747622][T21004] bridge_slave_1: left promiscuous mode [ 1246.788998][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.883135][T21004] bridge_slave_0: left allmulticast mode [ 1246.929487][T21004] bridge_slave_0: left promiscuous mode [ 1246.968823][T21004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.498099][T22489] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3169'. [ 1248.665483][T21004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.718934][T21004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.759597][T21004] bond0 (unregistering): Released all slaves [ 1248.782812][T22382] team0: Port device team_slave_1 added [ 1249.141410][T22382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.199870][T22382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.275697][T15757] ------------[ cut here ]------------ [ 1249.281951][T15757] ODEBUG: free active (active state 0) object: ffff888047b45460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1249.295498][T15757] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: kworker/0:12/15757 [ 1249.306355][T15757] Modules linked in: [ 1249.310702][T15757] CPU: 0 UID: 0 PID: 15757 Comm: kworker/0:12 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1249.322800][T15757] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1249.331187][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.342322][T15757] Workqueue: events devcd_del [ 1249.347055][T15757] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1249.353382][T15757] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b2 e4 df 0b 41 56 48 8b 14 dd 60 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc 6d d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1249.373438][T15757] RSP: 0018:ffffc900038277e8 EFLAGS: 00010246 [ 1249.379579][T15757] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1249.388420][T15757] RDX: ffffffff8bf2c5a0 RSI: ffffffff8bf2c180 RDI: ffffffff90929320 [ 1249.397077][T15757] RBP: 0000000000000001 R08: ffff888047b45460 R09: ffffffff8b906c80 [ 1249.405571][T15757] R10: ffffffff9088ebd7 R11: ffff88801d3666b0 R12: ffffffff8bf2c180 [ 1249.413866][T15757] R13: ffffffff8b906cc0 R14: ffffffff8a7e24c0 R15: ffffc900038278e8 [ 1249.422784][T15757] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 1249.432354][T15757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1249.439057][T15757] CR2: 0000001b30f22ff8 CR3: 00000000b17f8000 CR4: 00000000003526f0 [ 1249.447499][T15757] Call Trace: [ 1249.450798][T15757] [ 1249.453744][T15757] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1249.459658][T15757] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1249.465535][T15757] debug_check_no_obj_freed+0x4b7/0x600 [ 1249.471167][T15757] ? find_held_lock+0x2b/0x80 [ 1249.475971][T15757] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1249.482143][T15757] ? __page_table_check_zero+0x2f2/0x4a0 [ 1249.488218][T15757] ? __pfx___page_table_check_zero+0x10/0x10 [ 1249.494249][T15757] __free_frozen_pages+0x31a/0x1170 [ 1249.500226][T15757] hci_release_dev+0x4ef/0x640 [ 1249.505054][T15757] ? kfree+0x2f8/0x6e0 [ 1249.509483][T15757] ? __pfx_hci_release_dev+0x10/0x10 [ 1249.514795][T15757] ? rcu_is_watching+0x12/0xc0 [ 1249.520380][T15757] ? kfree+0x27d/0x6e0 [ 1249.524487][T15757] bt_host_release+0x6a/0xb0 [ 1249.529686][T15757] ? __pfx_bt_host_release+0x10/0x10 [ 1249.535015][T15757] device_release+0xa4/0x240 [ 1249.539821][T15757] kobject_put+0x1ef/0x6f0 [ 1249.544262][T15757] put_device+0x1f/0x30 [ 1249.548818][T15757] devcd_dev_release+0x122/0x170 [ 1249.553784][T15757] ? __pfx_devcd_dev_release+0x10/0x10 [ 1249.559694][T15757] device_release+0xa4/0x240 [ 1249.564340][T15757] kobject_put+0x1ef/0x6f0 [ 1249.568871][T15757] put_device+0x1f/0x30 [ 1249.573065][T15757] devcd_del+0xaa/0xd0 [ 1249.577219][T15757] process_one_work+0x9ba/0x1b20 [ 1249.582275][T15757] ? __pfx_process_one_work+0x10/0x10 [ 1249.588110][T15757] ? assign_work+0x1a0/0x250 [ 1249.592773][T15757] worker_thread+0x6c8/0xf10 [ 1249.597771][T15757] ? __kthread_parkme+0x19e/0x250 [ 1249.603209][T15757] ? __pfx_worker_thread+0x10/0x10 [ 1249.608693][T15757] kthread+0x3c5/0x780 [ 1249.612808][T15757] ? __pfx_kthread+0x10/0x10 [ 1249.617528][T15757] ? rcu_is_watching+0x12/0xc0 [ 1249.623100][T15757] ? __pfx_kthread+0x10/0x10 [ 1249.628258][T15757] ret_from_fork+0x983/0xb10 [ 1249.632875][T15757] ? __pfx_ret_from_fork+0x10/0x10 [ 1249.638060][T15757] ? rcu_is_watching+0x12/0xc0 [ 1249.642852][T15757] ? __switch_to+0x7af/0x10d0 [ 1249.647607][T15757] ? __pfx_kthread+0x10/0x10 [ 1249.652569][T15757] ret_from_fork_asm+0x1a/0x30 [ 1249.657769][T15757] [ 1249.660809][T15757] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1249.668102][T15757] CPU: 0 UID: 0 PID: 15757 Comm: kworker/0:12 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1249.679235][T15757] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1249.686611][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.696720][T15757] Workqueue: events devcd_del [ 1249.701450][T15757] Call Trace: [ 1249.704778][T15757] [ 1249.707731][T15757] dump_stack_lvl+0x3d/0x1f0 [ 1249.712357][T15757] vpanic+0x640/0x6f0 [ 1249.716362][T15757] ? debug_print_object+0x18e/0x2a0 [ 1249.721588][T15757] panic+0xca/0xd0 [ 1249.725331][T15757] ? __pfx_panic+0x10/0x10 [ 1249.729773][T15757] ? check_panic_on_warn+0x1f/0xb0 [ 1249.734909][T15757] check_panic_on_warn+0xab/0xb0 [ 1249.739874][T15757] __warn+0x108/0x3c0 [ 1249.743884][T15757] __report_bug+0x2a0/0x520 [ 1249.748440][T15757] ? debug_print_object+0x18e/0x2a0 [ 1249.753688][T15757] ? __pfx___report_bug+0x10/0x10 [ 1249.758756][T15757] ? __lock_acquire+0x436/0x2890 [ 1249.763715][T15757] report_bug_entry+0xe1/0x290 [ 1249.768516][T15757] ? debug_print_object+0x19b/0x2a0 [ 1249.773750][T15757] handle_bug+0x18a/0x260 [ 1249.778112][T15757] exc_invalid_op+0x17/0x50 [ 1249.782658][T15757] asm_exc_invalid_op+0x1a/0x20 [ 1249.787531][T15757] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1249.793367][T15757] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b2 e4 df 0b 41 56 48 8b 14 dd 60 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc 6d d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1249.812996][T15757] RSP: 0018:ffffc900038277e8 EFLAGS: 00010246 [ 1249.819079][T15757] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1249.827065][T15757] RDX: ffffffff8bf2c5a0 RSI: ffffffff8bf2c180 RDI: ffffffff90929320 [ 1249.835052][T15757] RBP: 0000000000000001 R08: ffff888047b45460 R09: ffffffff8b906c80 [ 1249.843040][T15757] R10: ffffffff9088ebd7 R11: ffff88801d3666b0 R12: ffffffff8bf2c180 [ 1249.851024][T15757] R13: ffffffff8b906cc0 R14: ffffffff8a7e24c0 R15: ffffc900038278e8 [ 1249.859012][T15757] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1249.864523][T15757] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1249.870004][T15757] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1249.875847][T15757] debug_check_no_obj_freed+0x4b7/0x600 [ 1249.881434][T15757] ? find_held_lock+0x2b/0x80 [ 1249.886326][T15757] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1249.892430][T15757] ? __page_table_check_zero+0x2f2/0x4a0 [ 1249.898101][T15757] ? __pfx___page_table_check_zero+0x10/0x10 [ 1249.904124][T15757] __free_frozen_pages+0x31a/0x1170 [ 1249.909354][T15757] hci_release_dev+0x4ef/0x640 [ 1249.914140][T15757] ? kfree+0x2f8/0x6e0 [ 1249.918232][T15757] ? __pfx_hci_release_dev+0x10/0x10 [ 1249.923534][T15757] ? rcu_is_watching+0x12/0xc0 [ 1249.928324][T15757] ? kfree+0x27d/0x6e0 [ 1249.932415][T15757] bt_host_release+0x6a/0xb0 [ 1249.937064][T15757] ? __pfx_bt_host_release+0x10/0x10 [ 1249.942384][T15757] device_release+0xa4/0x240 [ 1249.947005][T15757] kobject_put+0x1ef/0x6f0 [ 1249.951447][T15757] put_device+0x1f/0x30 [ 1249.955658][T15757] devcd_dev_release+0x122/0x170 [ 1249.960626][T15757] ? __pfx_devcd_dev_release+0x10/0x10 [ 1249.966106][T15757] device_release+0xa4/0x240 [ 1249.970733][T15757] kobject_put+0x1ef/0x6f0 [ 1249.975170][T15757] put_device+0x1f/0x30 [ 1249.979353][T15757] devcd_del+0xaa/0xd0 [ 1249.983456][T15757] process_one_work+0x9ba/0x1b20 [ 1249.988458][T15757] ? __pfx_process_one_work+0x10/0x10 [ 1249.993869][T15757] ? assign_work+0x1a0/0x250 [ 1249.998486][T15757] worker_thread+0x6c8/0xf10 [ 1250.003106][T15757] ? __kthread_parkme+0x19e/0x250 [ 1250.008169][T15757] ? __pfx_worker_thread+0x10/0x10 [ 1250.013391][T15757] kthread+0x3c5/0x780 [ 1250.017485][T15757] ? __pfx_kthread+0x10/0x10 [ 1250.022097][T15757] ? rcu_is_watching+0x12/0xc0 [ 1250.026894][T15757] ? __pfx_kthread+0x10/0x10 [ 1250.031512][T15757] ret_from_fork+0x983/0xb10 [ 1250.036127][T15757] ? __pfx_ret_from_fork+0x10/0x10 [ 1250.041259][T15757] ? rcu_is_watching+0x12/0xc0 [ 1250.046051][T15757] ? __switch_to+0x7af/0x10d0 [ 1250.050749][T15757] ? __pfx_kthread+0x10/0x10 [ 1250.055360][T15757] ret_from_fork_asm+0x1a/0x30 [ 1250.060169][T15757] [ 1250.063271][T15757] Kernel Offset: disabled [ 1250.067612][T15757] Rebooting in 86400 seconds..